Effective: from 15 October 2026
1. Whose site is this?
shop.weboldaldesign.com is the demo web shop of weboldaldesign.com. “Szemes & Leveles” is a fictional brand and the products are not real. The checkout does not create orders and no payment takes place. The site shows how a web shop and sales chatbot built by us work.
Data controller: Imre Dobó, sole proprietor
Registered office: Hajnal utca 14. 2/13., 4029 Debrecen, Hungary
Registering authority and registration number: Hajdú-Bihar County Government Office, 52110667 · Tax number: 53669401-1-29
E-mail: info@weboldaldesign.com · Phone: +36 30 609 5404
We are not required to appoint a data protection officer (GDPR Article 37).
2. What data do we process, and why?
2.1. Browsing and cart
- Data: the contents of your cart and a random session identifier (in a cookie), plus the server's technical log (IP address, time, browser).
- Purpose: running the cart, and operating the site securely and without errors.
- Legal basis: legitimate interest (GDPR Article 6(1)(f)). The cart cookie is strictly necessary to provide the service (Hungarian Electronic Communications Act, Section 155(4)).
- Retention: cart cookies until the end of the session, at most 2 days; the hosting provider keeps the server log only for the short period needed for security.
2.2. The checkout form
If you try the checkout, the data you enter (name, address, e-mail, phone) does not create an order: the site stops the process with an error message. The data may be present temporarily in the cart session, and in the background the checkout may store an unfinished draft order with the data you entered for at most 1 day, after which it is deleted automatically. You cannot register on this site. Please do not enter real personal data: made-up data is enough for the demo.
2.3. Chatbot (ChatAutomata AI barista)
- Data: the text of the conversation (and anything you type into the chat), technical data (browser, page, language, time), and for voice conversations the text transcript of your speech. No audio recording is made of voice calls.
- Purpose: answering your questions, recommending products and adding them to your cart, and showing how a sales chatbot works.
- Legal basis: legitimate interest (GDPR Article 6(1)(f)), because using the chatbot is voluntary and initiated by you.
- Artificial intelligence: the replies are generated by an AI system; we inform you of this in the header and at the bottom of the chat window, and at the start of a voice call (EU AI Act, Article 50). The replies are for information only.
- Retention: we keep the conversation for 365 days from the last message, after which it is deleted automatically. We delete it earlier on request. Conversations are not used to train AI models.
- Please do not share sensitive data in the chat (e.g. health data or card numbers).
2.4. Cookie consent and language choice
- SütiPajzs saves your cookie settings (sutipajzs_consent, 12 months) and TranslatePress saves your chosen language (trp_language, 30 days). Both are necessary for the site to work.
- We do not use statistics, marketing or social media cookies. Details are in the Cookie policy .
3. Who has access to the data? (processors)
| Provider | Task | Location, safeguards |
|---|---|---|
| Hostinger International Ltd. | hosting, server, CDN | EU |
| Ollama, Inc. (Ollama Cloud) | generating the chatbot's replies | mainly USA, partly Europe; see below |
| OpenAI Ireland Ltd. | backup reply generation, only if Ollama Cloud is unavailable | Ireland; towards the USA: standard contractual clauses (SCC) |
| Eleven Labs Inc. | voice calls: speech recognition and text-to-speech | USA; EU–US Data Privacy Framework (DPF) and SCC |
Our own services, not separate companies: ChatAutomata (storing conversations on an EU server) and SütiPajzs (managing cookie consent).
According to its own commitment, Ollama, Inc. does not log, further store or train on the requests and replies. It has confirmed in writing that it currently does not sign data processing agreements (although it plans to), and it offers neither an adequacy decision nor standard contractual clauses for transfers to the United States. That is why we only pass the text of the conversation to the chatbot, and we ask you not to include your name, contact details or other personal data. OpenAI Ireland Ltd. and Eleven Labs Inc. work under written data processing agreements; for transfers to the United States, OpenAI relies on standard contractual clauses and ElevenLabs on the EU–US Data Privacy Framework and standard contractual clauses.
Providing data is not mandatory: you do not need to give any personal data to browse the site or use the chatbot. There is no automated decision-making or profiling.
4. Your rights
You can request information about your data, ask for it to be corrected, erased or restricted, object to processing based on legitimate interest, and request data portability. Write to info@weboldaldesign.com and we will reply within one month at the latest.
You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): Falk Miksa utca 9–11., 1055 Budapest; postal address: 1363 Budapest, Pf. 9.; e-mail: ugyfelszolgalat@naih.hu; www.naih.hu. You can also go to court. You do not need to contact us first in order to lodge a complaint.
5. Changes
We update this policy when the demo web shop changes; the current version is always available on this page.