Privacy Notice
1. Introduction
This Privacy Notice informs users and customers of the agau999.com website (hereinafter: "Webshop") about the processing of personal data carried out by Marvena Mint Kft. (hereinafter: "Controller"), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter: "GDPR") and Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information.
2. Details of the Controller
Company name: Marvena Mint Kft.
Registered seat: 4400 Nyíregyháza, Fészek utca 9., Hungary
E-mail: info@agau999.com
Phone: +36 70 556 3480
Website: https://agau999.com
3. Scope, Purpose and Legal Basis of Data Processed
3.1 Data related to orders, invoicing and shipping
Data processed: name, billing and shipping address, e-mail address, phone number, details of ordered products and the price paid.
Purpose: fulfilling the order, issuing an invoice, delivering the product, performing contractual obligations, and communication.
Legal basis: Article 6(1)(b) GDPR (performance of a contract); for billing data, the retention obligation under accounting and tax legislation (e.g. Act C of 2000 on Accounting) provides the legal basis under Article 6(1)(c) GDPR (compliance with a legal obligation).
Retention period: the Service Provider retains invoicing documents for the 8 years required under accounting legislation; other order-related data is retained until claims arising from the contract become time-barred.
3.2 Customer due diligence (anti-money laundering) data processing
As a precious metals dealer, the Service Provider is subject to Act LIII of 2017 on the Prevention and Combating of Money Laundering and Terrorist Financing (the "AML Act"), the related NGM Decree 33/2017 (X.26.) applicable to precious metal and goods traders, and the Service Provider's internal anti-money laundering policy. Accordingly, the Service Provider carries out the following data processing:
- for transactions reaching HUF 300,000, it records the Customer's identification data (in particular, address and identity document number);
- pursuant to Section 6(1)(c) of the AML Act, for cash transactions reaching or exceeding HUF 3,000,000, it carries out full customer due diligence;
- under the Service Provider's internal policy, for transactions above HUF 4,000,000 it may request from the Customer a declaration of politically exposed person (PEP) status and a declaration regarding the source of the funds used (proof of source of wealth).
Legal basis: Article 6(1)(c) GDPR (compliance with a legal obligation under the AML Act and related legislation, and under the Service Provider's internal policy).
Retention period: 8 years from the termination of the business relationship, as set out in the AML Act.
3.3 Newsletter and marketing data processing
If the Customer subscribes to the Webshop's newsletter, the Service Provider processes the name and e-mail address provided for the purpose of sending the newsletter.
Legal basis: the Customer's voluntary consent (Article 6(1)(a) GDPR).
Consent may be withdrawn at any time, free of charge and without justification, via the unsubscribe link at the bottom of the newsletter or by e-mail to info@agau999.com.
Retention period: until consent is withdrawn.
3.4 Cookies
The Webshop uses cookies necessary for the operation of the website, and — subject to the user's consent — statistical and marketing cookies. Detailed information about cookies and setting options is provided by the cookie notice displayed on the Webshop and by the user's browser settings.
4. Data Transfers and Data Processors
To fulfil orders, the Service Provider may use the following types of data processors (contributors): courier/shipping companies (MPL, FedEx) regarding the data necessary for delivery, the provider of the invoicing and accounting software regarding billing data, and the Webshop's hosting provider.
The Webshop's hosting provider operates within the European Union (Germany), so data storage takes place within the European Economic Area, to which the GDPR is directly applicable.
Beyond the above, the Service Provider transfers personal data to third parties only where required to comply with a legal obligation (e.g. an official request, or the reporting obligation under the AML Act).
5. Rights of Data Subjects
Under the GDPR, the Customer/user (data subject) has the following rights regarding the processing of their personal data:
- the right to information and access (which data the Controller processes and for what purpose);
- the right to rectification (correction of inaccurate data);
- the right to erasure ("right to be forgotten"), within the limits of statutory retention obligations;
- the right to restriction of processing;
- the right to data portability;
- the right to object;
- in the case of processing based on consent, the right to withdraw consent at any time.
The data subject may exercise the above rights via e-mail at info@agau999.com. The Service Provider responds to requests without undue delay, and at the latest within one month.
6. Remedies
If the data subject believes that the processing of their personal data infringes the GDPR or applicable law, they may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Phone: +36 1 391 1400
E-mail: ugyfelszolgalat@naih.hu
Website: www.naih.hu
The data subject may also seek redress before the court competent for their place of residence or stay.
7. Data Security
The Service Provider implements appropriate technical and organizational measures to ensure the security of the personal data processed, protecting it from unauthorized access, alteration, transmission, disclosure, deletion or destruction.
8. Final Provisions
The Service Provider reserves the right to unilaterally amend this Notice, in line with applicable legal requirements at any given time. The Service Provider informs data subjects of any amendments through the Webshop.
This Privacy Notice was last updated in September 2026.