Privacy Policy

Date of acceptance: 01/08/2026

This document contains information about the data processing activities carried out by Miklós Tibor (hereinafter: Data Controller) in connection with the operation of the http://www.wildmindscompany.com webshop, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the Regulation, GDPR).

I. Details of the Data Controller

Name: Miklós Tibor EV

Registered office: 2000 Szentendre, Huba utca 4.

Tax number: 76418309-1-33

Registration number: 51429182

Representative: Miklós Tibor

Correspondence address, complaint handling: 2000 Szentendre, Jázmin utca 17.

E-mail: info@wildmindscompany.com

Phone number: +36203174338

Website: http://www.wildmindscompany.com

II. Description of the data processing carried out in connection with the operation of the webshop and the performance of contracts

II.1. Contact

Content and purpose of the data processing: Receiving your inquiry, answering your question, and the necessary communication involved, for example when you contact us by email, contact form, or telephone. Prior contact is not mandatory — you may place an order in the webshop at any time without it.

Data processed: The data you provide when contacting us.

Duration of data processing: We process the data only until the inquiry is closed.

Legal basis of the data processing: Your voluntary consent, given to the Data Controller by making contact. [Data processing under Article 6(1)(a) of the Regulation]

II.2. Processing of the order

Content and purpose of the data processing: Processing and fulfilling orders, and related communication (including sending notifications about order status and sending invoices), carried out as a data processing activity necessary for the performance of the contract.

Data processed: In the course of data processing, the Data Controller processes your name, address, phone number, email address, the characteristics of the purchased Goods, the order number, and the date of purchase.

Duration of data processing: We process the data for 5 years from the performance of the contract, in accordance with the civil-law limitation period.

Legal basis of the data processing Performance of the contract concluded with you as a buyer. [Data processing under Article 6(1)(b) of the Regulation]

II.3. Issuing the invoice

Content and purpose of the data processing: This data processing takes place in order to issue an invoice in compliance with legislation and to fulfill the obligation to retain accounting documents. Under Section 169(1)-(2) of Act C of 2000 on Accounting (hereinafter: the Accounting Act), business entities must retain accounting documents that directly or indirectly support their bookkeeping.

Data processed: Name, address.

Duration of data processing: Under Section 169(2) of the Accounting Act, issued invoices must be retained for 8 years from the date of issue.

Legal basis of the data processing

Compliance with a legal obligation. Under Section 159(1) of Act CXXVII of 2007 on Value Added Tax, issuing an invoice is mandatory, and under Section 169(2) of the Accounting Act it must be retained for 8 years [Data processing under Article 6(1)(c) of the Regulation].

II.4. Data processing related to delivery of goods

Content and purpose of the data processing: We deliver your order to the address you provide, using our partners, in accordance with the delivery method you selected.

Data processed: Name, address, email address, phone number.

Duration of data processing: The Data Controller processes the data for the duration of delivery of the ordered goods.

Legal basis of the data processing: The legal basis of the data processing is performance of the contract [Data processing under Article 6(1)(b) of the Regulation].

II.5. Handling of warranty and guarantee claims

Content and purpose of the data processing: When handling warranty of conformity and guarantee claims, we must proceed in accordance with NGM Decree 19/2014 (IV. 29.), which also sets out how your claim must be handled.

Data processed

When handling warranty of conformity and guarantee claims, we must proceed in accordance with NGM Decree 19/2014 (IV. 29.).

Under the decree, we are required to draw up a record of any warranty or guarantee claim reported to us, recording:

your name and address, and your declaration consenting to the processing of your data recorded in the report as set out in the decree,
the description and purchase price of the movable item sold under the contract between you and us,
the date of performance of the contract,
the date the defect was reported,
a description of the defect,
the right you wish to assert based on your warranty of conformity or guarantee claim, and
the manner of settling the warranty of conformity or guarantee claim, or the reasons for rejecting the claim or the right asserted under it.

If we take back the purchased Goods from you, we must issue a receipt of acceptance stating

your name and address,
the data necessary to identify the item,
the date the item was received, and
the date on which you can collect the repaired item.

Duration of data processing: Under Section 4(6) of NGM Decree 19/2014 (IV. 29.), the business is required to retain the record drawn up regarding the consumer’s warranty of conformity or guarantee claim for three years from the date it was drawn up, and to present it to the supervisory authority upon request.

Legal basis of the data processing: The legal basis of the data processing is compliance with the legal obligations set out in NGM Decree 19/2014 (IV. 29.) [Section 4(1) and (6), and Section 6(1)] [Data processing under Article 6(1)(c) of the Regulation].

II.6. Handling of other consumer protection complaints

Content and purpose of the data processing

You have the option to lodge a consumer protection complaint. The purpose of the data processing is to investigate, respond to, and document consumer protection complaints relating to the webshop.

A consumer protection complaint is an objection relating to conduct, activity, or omission by us, or a person acting on our behalf or for our benefit, directly connected with the distribution or sale of goods to you, aimed at remedying an individual violation of rights or interests (a complaint under Section 2(28a) of Act CLV of 1997 on Consumer Protection).

If you have submitted a complaint to us, then processing the data you provide is essential for investigating the complaint.

Data processed

The record of the complaint must contain the following:

your name, address, or email address,
the place, time, and method of submitting the complaint,
a detailed description of your complaint, and a list of documents and other evidence presented by you,
our statement on our position regarding your complaint, if immediate investigation of the complaint is possible,
the signature of the person taking the record and — except for an oral complaint made by telephone or other electronic communications service — your signature,
the place and time the record was taken,
in the case of an oral complaint made by telephone or other electronic communications service, the complaint’s unique identification number.

Duration of data processing: Under Section 17/A(7) of Act CLV of 1997 on Consumer Protection, we are required to retain the record of an oral complaint or a written complaint, together with a copy of our substantive response, for three years, and to present it to the supervisory authority upon request.

Legal basis of the data processing: Whether or not you contact us with a complaint is your voluntary decision; however, if you do contact us, we are required to handle it in accordance with Section 17/A of Act CLV of 1997 on Consumer Protection [Data processing under Article 6(1)(c) of the Regulation].

II.7. Data processed in connection with verifiability of consent

Content and purpose of the data processing: In the case of consent-based data processing, in particular during registration and newsletter sign-up, our IT system stores technical data relating to the consent for future evidentiary purposes.

Data processed: The time of consent and the IP address of the data subject.

Duration of data processing: We process the data for the duration of the data processing activity to which the consent relates.

Legal basis of the data processing: Consent of the data subject [Data processing under Article 6(1)(a) of the Regulation].

II.8. Data processing related to sending newsletters

Content and purpose of the data processing: This data processing takes place for the purpose of sending newsletters.

Data processed: Name, email address.

Duration of data processing: Until the data subject withdraws their consent.

Legal basis of the data processing: Your voluntary consent, given to the Data Controller by subscribing to the newsletter [Data processing under Article 6(1)(a) of the Regulation]

III. Information on the use of cookies

III.1. What is a cookie?

The Data Controller uses so-called cookies when the website is visited. A cookie is an information package consisting of letters and numbers, sent by our website to your browser, for the purpose of saving certain of your settings, making it easier to use our website, and helping us collect some relevant statistical information about our visitors.

Some cookies do not contain personal information and are not suitable for identifying an individual user, while others contain an individual identifier — a secret, randomly generated string — which is stored on your device and thereby ensures your identifiability. The duration of operation of each cookie is set out in its individual description below.

You may also disable cookies in your browser settings; more information can be found at the following links:

III.2. Legal background and legal basis of the cookies:

We distinguish essentially three types of cookies: cookies strictly necessary for operation, which serve the proper functioning of the Website, statistical-purpose cookies, and marketing-purpose cookies.

The legal basis of the data processing is your consent, under Article 6(1)(a) of the Regulation, for statistical- and marketing-purpose cookies, and legitimate interest necessary to ensure the operation of the Website, under Article 6(1)(f) of the Regulation, for cookies necessary for operation.

III.3. Main characteristics of the cookies used by the website:

Cookies strictly necessary for operation:

If you do not accept the use of these cookies, certain functions may not be available to you.

Cookies strictly necessary for operation: These cookies are indispensable for using the website and allow the use of its basic functions. Without them, many functions of the site will not be available to you. The lifespan of these cookies is limited exclusively to the duration of the session.

Recommended products cookie: Records the list of products you wish to recommend when using the “recommend to a friend” function. Lifespan: 60 days.

Mobile version, design cookie: Detects the device used by the visitor and switches to full view on mobile. Lifespan: 365 days.

Cookie acceptance cookie: Records your acceptance of the cookie storage notice shown in the warning window when arriving at the site. Lifespan: 365 days.

Statistical-purpose cookies:

Google Analytics cookie: Google Analytics is Google’s analytics tool, which helps website and app owners get a more accurate picture of their visitors’ activities. The service may use cookies to gather information and produce reports on website usage statistics, without individually identifying visitors to Google. The main cookie used by Google Analytics is the “__ga” cookie. In addition to reports produced from website usage statistics, Google Analytics — together with some of the advertising cookies described above — may also be used to display more relevant ads within Google products (for example, in Google Search) and across the internet. Lifespan of Google Analytics cookies: _ga — 2 years; ga — 2 years. Analytics cookies store information about you only if you have consented to the use of cookies in the cookie management panel, and Google records the fact of consent using Google Consent Mode v2. In this case, Google will also have information if you later withdraw this consent.

Cookies for improving user experience: These cookies collect information about how the user uses the website, for example, which pages they visit most frequently, or what error messages they receive from the website. These cookies do not collect information identifying the visitor — they work with entirely general, anonymous information. The data obtained from them is used to improve the performance of the website. The lifespan of these cookies is limited exclusively to the duration of the session.

Last viewed product cookie: Records the products most recently viewed by the visitor. Lifespan: 60 days.

Last viewed category cookie: Records the most recently viewed category. Lifespan: 60 days.

Cart cookie: Records the products placed in the cart. Lifespan: 365 days.

Marketing-purpose cookies:

Google AdWords cookie: When someone visits our site, the visitor’s cookie identifier is added to the remarketing list. Google uses cookies — such as the NID and SID cookies — in Google products, such as to customize the ads shown in Google Search. Such cookies are used, for example, to remember your most recent searches, your prior interactions with individual advertisers’ ads or search results, and your visits to advertisers’ websites. The AdWords conversion tracking feature uses cookies. To track sales and other conversions resulting from an ad, cookies are saved to the user’s computer when that person clicks on an ad. Some common uses of cookies include: selecting ads based on what is relevant to a given user, improving reporting on campaign performance, and avoiding showing ads the user has already seen. Lifespan of Google AdWords cookies: NID — 6 months; _gcl_aw — 90 days; _gcl_au — 90 days; Conversion — 90 days. AdWords cookies store information about you only if you have consented to the use of cookies in the cookie management panel, and Google records the fact of consent using Google Consent Mode v2. In this case, Google will also have information if you later withdraw this consent.

Remarketing cookies: May be shown to previous visitors or users while browsing other sites within the Google Display Network, or when searching for terms related to our products or services. Remarketing cookies store information about you only if you have consented to the use of cookies in the cookie management panel, and Google records the fact of consent using Google Consent Mode v2. In this case, Google will also have information if you later withdraw this consent.

Facebook Pixel (Facebook cookie): The Facebook pixel is code that enables reporting on conversions on the website, allows target audiences to be assembled, and provides the site owner with detailed analytics on visitors’ use of the website. Using the Facebook pixel, personalized offers and ads may be shown to website visitors on Facebook’s platform. Facebook pixel cookies used and their lifespan: _fbp — 3 months; fr — 3 months

IV. Recipients of personal data

IV.1. Data processors engaged by the Data Controller

Data processor: a natural or legal person, public authority, agency, or any other body which processes personal data on behalf of the data controller.

IV.1.1. Hosting provider

Name: Soluciones Corporativas IP, SL

Registered office: 07500 Manacor Spain C/ Menestrals, 14

Contact: info@dondominio.com

Website: https://dondominio.com

Based on the contract concluded with the Data Controller, the Data Processor stores personal data. It is not authorized to access the personal data.

IV.1.2. Data processing related to invoicing

Name of the data processor: KBOSS.hu Kft.

Registered office of the data processor: 1031 Budapest, Záhony utca 7/D.

Website of the data processor: https://www.szamlazz.hu/

Based on the contract concluded with the Data Controller, the Data Processor assists in issuing and recording accounting documents.

IV.1.3. Data processing in a third country: The Rocket Science Group LLC.

Description and safeguards of data processing outside the EU

Name of the data processor: The Rocket Science Group LLC. Registered office of the data processor: 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA E-mail address of the data processor: privacy@mailchimp.com Website of the data processor: mailchimp.com

Mailchimp processes personal data outside the territory of the European Union. Based on the contract concluded with the Data Controller, the Data Processor assists in sending newsletters.

Mailchimp is a participant in the EU-U.S. Data Privacy Framework, which provides adequate safeguards regarding the legal compliance of data processing carried out in the third country.

IV.2. Transfer of data to third parties

The Data Controller transfers data to third parties (recipients) as set out below. These recipients process the data not according to the Data Controller’s instructions, but as independent data controllers, based on their own data processing policies.

IV.2.1. Recipients of data processing related to delivery of goods

Name of the recipient: GLS General Logistics Systems Hungary Csomag-Logisztikai Kft.

Registered office of the recipient: 2351 Alsónémedi, GLS Európa u. 2.

Phone number of the recipient: 06-29-88-67-00

E-mail address of the recipient: info@gls-hungary.com

Website of the recipient: https://gls-group.eu/HU/hu/home

Based on the contract concluded with the Data Controller, the courier service assists in delivering the ordered goods. The courier service processes the personal data it receives in accordance with the privacy policy available on its website.

Purpose of the data transfer: providing the courier service with data related to the purchase, for the purpose of carrying out delivery.

Legal basis of the data transfer: under Article 6(1)(b) of the Regulation, performance of the contract concluded between you and the Data Controller, which includes delivery of the product, if you selected a delivery method during the order.

V. Your rights in connection with the data processing

Within the duration of the data processing, you are entitled to the rights indicated in this notice, in accordance with the provisions of the Regulation.

If you wish to exercise your rights, this involves identifying you, and the Data Controller will necessarily need to communicate with you. For this purpose, providing personal data for identification will be necessary (but identification may only be based on data that the Data Controller already processes about you), and your complaints relating to data processing will be available in the Data Controller’s email account for the retention period indicated in this notice in relation to complaints.

The Data Controller responds to complaints relating to data processing within 30 days at the latest.

V.1. Right to withdraw consent

You are entitled to withdraw your consent to the data processing at any time. In this case, we will delete your personal data based on the consent from our systems.

V.2. Right of access to personal data

You are entitled to receive confirmation from us as to whether we are processing your personal data. If so, you are entitled to access this data, and to receive information on the following:

the purposes for which we process your personal data;
what types (categories) of personal data we process about you;
to whom, or to what recipients, we have transferred or may transfer the personal data;
how long we store the personal data, or, if this cannot be determined in advance, the criteria used to determine the duration of the data processing;
what rights you have to rectify or erase your personal data, or to restrict the processing, as well as the right to object in the case of data processing based on legitimate interest;
the option to lodge a complaint with the supervisory authority;
if the data was not obtained from you, the source of the data;
whether we apply automated decision-making (including profiling), and if so, information about its logic, significance, and the expected consequences of such processing for you.

The purpose of exercising the right of access is primarily to verify the lawfulness of the data processing. If you unreasonably repeatedly request information of the same content, we are entitled to charge a reasonable administrative fee.

V.3. Right to rectification

You are entitled to have the Data Controller rectify, without undue delay, inaccurate personal data relating to you, upon your request.

V.4. Right to restriction of processing

You are entitled to request that the Data Controller restrict the data processing if one of the following applies:

you contest the accuracy of the personal data, in which case the restriction applies for the period enabling the Data Controller to verify the accuracy of the personal data; if the accurate data can be established immediately, no restriction will apply;
the data processing is unlawful, but you oppose the erasure of the data for any reason (for example, because the data is important to you for the assertion of a legal claim), and therefore, instead of requesting erasure, you request the restriction of their use;
the Data Controller no longer needs the personal data for the purposes of the data processing, but you require them for the establishment, exercise, or defense of legal claims; or
you have objected to the processing, but the Data Controller’s legitimate interest may also justify the processing; in this case, the processing must be restricted pending verification of whether the Data Controller’s legitimate grounds override your legitimate grounds.

If the processing is restricted, such personal data may, with the exception of storage, only be processed with the data subject’s consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

V.5. Right to erasure — “the right to be forgotten”

You are entitled to have the Data Controller erase personal data relating to you without undue delay if one of the following grounds applies:

the personal data is no longer necessary for the purposes for which the Data Controller collected or otherwise processed it;
you withdraw your consent, and there is no other legal basis for the processing;
you object to processing based on legitimate interest, and there are no overriding legitimate grounds (i.e. legitimate interest) for the processing;
the personal data has been unlawfully processed by the Data Controller, and this has been established based on a complaint;
the personal data must be erased for compliance with a legal obligation under EU or Member State law applicable to the Data Controller.

Erasure does not apply if the processing is necessary:

for compliance with a legal obligation under EU or Member State law applicable to the Data Controller which requires processing of the personal data (this includes data processing carried out in connection with invoicing, as retention of invoices is required by law), or for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the Data Controller;
for the establishment, exercise, or defense of legal claims (e.g. if the Data Controller has an outstanding claim against you that you have not yet fulfilled, or a consumer or data-processing complaint is pending).

V.6. Right to object

You are entitled, for reasons relating to your particular situation, to object at any time to the processing of your personal data based on legitimate interest. In this case, the Data Controller may no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or which relate to the establishment, exercise, or defense of legal claims.

V.7. Right to data portability

If the data processing is based on your voluntary consent or is carried out for the performance of a contractual obligation, you have the right to request that the Data Controller provide you with the data you have supplied to it, which the Data Controller will make available to you in XML, JSON, or CSV format; if technically feasible, you may request that the Data Controller transmit the data in this format directly to another data controller.

V.8. Right to a remedy

If, in your opinion, the Data Controller has violated any statutory provision relating to data processing, or has failed to fulfill any of your requests, you may initiate proceedings before the National Authority for Data Protection and Freedom of Information to remedy the alleged unlawful data processing (registered office: 1055 Budapest, Falk Miksa utca 9-11., mailing address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, phone numbers: +36 (30) 683-5969, +36 (30) 549-6838; +36 (1) 391 1400).

We also inform you that, in the event of a violation of the statutory provisions relating to data processing, or if the Data Controller has failed to fulfill any of your requests, you may turn to the regional court (törvényszék) competent for your place of residence or habitual residence.

VI. Other provisions

VI.1. Amendment of the Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy in ways that do not affect the purpose or legal basis of the data processing.

VI.2. Downloadable version

You can also download this Privacy Policy in PDF format here.

CUSTOM MTB CLOTHING | WILD MINDS COMPANY | CUSTOM MADE MTB ZIP-SHIRTS & MTB JERSEYS

DESIGNED BY RIDERS

made in Barcelona

Privacy Policy