When processing personal data, Pharmafit Sport Kft. (hereinafter the “Controller” or “we”) complies with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter “GDPR”) and Hungary’s Act CXII of 2011 on Informational Self-Determination and Freedom of Information.
We respect your rights regarding the protection of your personal data (hereinafter “Data Subject”). This notice briefly explains which personal data we process, for what purposes, on which legal basis, for how long, who may access them and what rights you have.
This notice applies to the richtofit.com website (the “Website”), the RICHTOFIT newsletter, enquiries and product complaints received by email, and the RICHTOFIT Facebook page and Instagram account.
1. Controller details
- Name: Pharmafit Sport Korlátolt Felelősségű Társaság (Pharmafit Sport Kft.)
- Registered office and postal address: 1024 Budapest, Ady Endre utca 19, 3rd floor, unit 312, Hungary
- Company registration number: 01-09-984975
- Tax number: 23928354-2-41
- Data protection: adatvedelem@pharmafitsport.hu
- General contact: info@richtofit.com
The Controller is not required to appoint a Data Protection Officer and has not appointed one.
2. Processing activities
2.1. Operating the Website (server logs)
When you access the Website, the hosting provider’s server records technical data.
- Data processed: IP address; time of request; URL of the page accessed; browser and operating-system information; referring page.
- Purpose: Secure operation of the Website, identifying errors and detecting misuse.
- Legal basis: The Controller’s legitimate interest in operating the Website reliably and securely (Article 6(1)(f) GDPR).
- Retention: The hosting provider retains logs only for as long as necessary for security purposes and then deletes them automatically.
2.2. Enquiries received by email
- Data processed: Name, email address, message content and any other information you provide (for example, telephone number).
- Purpose: To respond to the enquiry.
- Legal basis: The Controller’s legitimate interest in answering enquiries (Article 6(1)(f) GDPR).
- Retention: Until the enquiry is closed or, where correspondence may give rise to legal claims, until the general limitation period expires (up to five years).
Providing data is not mandatory, but we cannot respond without your name and contact details.
2.3. Handling product complaints
- Data processed: Name, address, telephone number, email address, description of the complaint and details of the product concerned.
- Purpose: To investigate and respond to the complaint.
- Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR and Section 17/A of Hungary’s Act CLV of 1997 on Consumer Protection).
- Retention: The complaint report and a copy of our response are kept for three years.
If a complaint contains health-related data (for example, a description of a skin reaction), we use it solely to investigate the complaint and fulfil statutory product-safety obligations (Article 9(2)(i) GDPR).
2.4. RICHTOFIT newsletter
- Data processed: Name, email address, subscription and confirmation timestamps and technical data (including IP address if recorded by the newsletter system), delivery information and data on newsletter opens and link clicks.
- Purpose: Sending the monthly RICHTOFIT newsletter and measuring opens and link clicks to improve its content.
- Legal basis: Your consent (Article 6(1)(a) GDPR and Section 6 of Hungary’s Act XLVIII of 2008 on Commercial Advertising).
- Retention: Until consent is withdrawn (unsubscribe).
Subscription takes place via the newsletter form on the Website, by entering your name and email address and ticking the box next to the following statement: “I have read the Privacy Notice and agree that Pharmafit Sport Kft. may send me a monthly newsletter and measure whether I open it and which links I click.” After you subscribe, we send you a confirmation email; you will receive the newsletter only after you have confirmed your subscription. We delete unconfirmed subscriptions after 30 days.
You may withdraw your consent at any time without giving reasons, by using the unsubscribe link at the bottom of every newsletter or by sending an email to adatvedelem@pharmafitsport.hu. After you unsubscribe, we will not send you any further newsletters and we will delete your data from the newsletter system without delay. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. An open is recorded only if your email client loads the images contained in the email.
The newsletter form loads only when you click to subscribe to the newsletter on the Website. The form is provided by Hostinger (see Section 3 and the Cookie Policy).
2.5. Website analytics and advertising (cookies)
Subject to the visitor’s prior consent, the Website uses Google Analytics and Meta Pixel. They are activated only if the relevant cookie category is accepted.
- Google Analytics: Aggregated measurement of the use of the Website (pages viewed, duration of the visit, device and browser type, approximate geographic location). Provider: Google Ireland Limited.
- Meta Pixel: Measuring the effectiveness of our Facebook and Instagram advertisements and displaying advertisements to people who have visited the Website. Provider: Meta Platforms Ireland Limited.
- Data processed: Online identifiers (cookie ID), IP address, browser and device information, actions performed on the Website (pages viewed, clicks).
- Legal basis: Your consent (Article 6(1)(a) GDPR and Section 155(4) of Hungary’s Act C of 2003 on Electronic Communications).
- Retention: Up to 14 months for Google Analytics; the expiry periods of the cookies are set out in the Cookie Policy.
With regard to the collection and transmission of data through the Meta Pixel, the Controller and Meta qualify as joint controllers; Meta is responsible for the further processing of the data in accordance with its own privacy policy (https://www.facebook.com/privacy/policy). For information on Google’s data processing, see: https://policies.google.com/privacy. You may withdraw your consent at any time using the “Cookie Settings” link in the footer of the Website.
2.6. Embedded YouTube video
The video on the homepage loads only when you click the Play button; until then, the Website does not connect to YouTube. When the video is played, Google receives your IP address, browser information and data relating to playback, and the player stores data in your browser. The player runs in YouTube’s privacy-enhanced mode (youtube-nocookie.com). Legal basis: Your consent, which you give by starting playback (Article 6(1)(a) GDPR). Google Ireland Limited is responsible for the further processing of the data.
2.7. The RICHTOFIT Facebook page and Instagram account
We operate the RICHTOFIT Facebook page and Instagram account on the platform of Meta Platforms Ireland Limited (hereinafter “Meta”). Following the page, sending messages and posting comments are voluntary.
- Page statistics: The Controller and Meta are joint controllers with regard to the statistics of the Facebook page (Article 26 GDPR; https://www.facebook.com/legal/terms/page_controller_addendum). The Controller sees only aggregated statistics. Legal basis: The Controller’s legitimate interest in measuring the reach of the page (Article 6(1)(f) GDPR).
- Messages and comments: If you send a message or post a comment, we can see your public name, your profile picture and the content of the message or comment. Purpose: To respond. Legal basis: Legitimate interest (Article 6(1)(f) GDPR). Retention: Until the enquiry is closed, but for no longer than one year.
- Advertising: We display our advertisements through Meta’s system; an advertising audience based on visitors to the Website is created only on the basis of consent given under Section 2.5.
Meta also processes the data in accordance with its own privacy policy: https://www.facebook.com/privacy/policy.
3. Processors and recipients
We disclose personal data to third parties only to the processors and recipients listed below, pursuant to law (for example, upon a request from an authority) or with your consent. Processors may process the data only in accordance with the Controller’s instructions.
| Processor | Identifier | Activity |
|---|---|---|
| New Event Kft. | company registration number: 01-09-197549 | IT operations, data storage, backups |
| Zsolt Kecskés, sole proprietor (1096 Budapest, Thaly Kálmán utca 41, 2nd floor, unit 7, Hungary) | registration number: 62509697; tax number: 56868001-1-43 | Administration of the Website (development, maintenance, technical administration of the web hosting and the newsletter system) |
| RHC Global Marketing LLC | tax number: 104684973100001 | Management of social media (Facebook, Instagram) |
| Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus) | – | Web hosting; operation of the newsletter form and sending of newsletters (Hostinger Reach) |
Hostinger International Ltd. engages further processors (sub-processors) to provide its service, including Cloudflare, Inc., which protects the newsletter form against automated traffic (https://www.hostinger.com/legal/dpa).
Other recipients: Google Ireland Limited (Google Analytics, YouTube video) and Meta Platforms Ireland Limited (Meta Pixel, Facebook page and Instagram account), as described in Sections 2.5–2.7; and authorities and courts where required by law.
Transfers outside the European Economic Area (EEA). The Website is hosted in Hostinger’s European data centre (in the European Union or in the United Kingdom, for which the European Commission has adopted an adequacy decision). Google LLC and Meta Platforms, Inc. may also transfer data to the United States; both companies participate in the EU–US Data Privacy Framework, and such transfers are based on the European Commission’s adequacy decision (EU) 2023/1795. Where any of our processors or their subcontractors processes data outside the EEA and there is no adequacy decision for the country concerned, the transfer takes place on the basis of standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR). You may request information about these using the contact details provided in Section 1.
4. Data security
We use appropriate technical and organisational measures to prevent unauthorised access, alteration or destruction of personal data. The Website is accessed via an encrypted HTTPS connection. In the event of a personal data breach, we act in accordance with Articles 33 and 34 GDPR.
5. Your rights
- Access: You may ask whether we process personal data about you and, if we do, request a copy of it.
- Rectification: You may request the correction of inaccurate data and the completion of incomplete data.
- Erasure: You may request the erasure of your data if there is no legal basis for the processing or you have withdrawn your consent (unless retention is required by law).
- Restriction: You may request the restriction of processing, for example if you contest the accuracy of the data.
- Objection: You may object at any time to processing based on legitimate interest.
- Data portability: You may request to receive, in a structured, machine-readable format, the data you have provided to us that we process on the basis of your consent, or ask us to transmit them to another controller.
- Withdrawal of consent: You may withdraw your consent to processing based on consent at any time; this does not affect the lawfulness of earlier processing.
You may submit your request using the contact details provided in Section 1. We will respond to your request without undue delay and in any event within one month; where justified, this period may be extended by a further two months, in which case we will inform you. Our response is free of charge. The Controller does not carry out automated decision-making or profiling.
6. Remedies
If you believe that we have infringed your data protection rights, please contact us first. You may also lodge a complaint with the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
- Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary
- Postal address: 1363 Budapest, Pf. 9, Hungary
- Telephone: +36 1 391 1400
- Email: ugyfelszolgalat@naih.hu
- Website: https://naih.hu
If your rights are infringed, you may also take legal action; you may choose to bring the action before the regional court having jurisdiction over your domicile or place of residence.
7. Changes to this notice
The Controller reserves the right to amend this notice. The current version is available on the Website.
Last updated: 28 October 2026.