Privacy Policy

1. Data Controller Information

This Privacy Policy explains how Wryva (operated by Owercomp Kft., Hungary) collects, uses, stores, and protects personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR).

For any data protection inquiries or to exercise your rights, please contact our Data Protection Officer at: info@wryva.com.

2. Categories of Personal Data Collected

We collect and process the following categories of personal data when you interact with our website, use our design tools, or place an order:

• Contact & Identification Details: First name, last name, email address, telephone number.
• Delivery & Invoicing Data: Shipping address, billing address, tax identification number (if applicable), parcel locker code.
• Design & Product Data: Uploaded images, custom texts, design layouts, and selected phone model specifications for custom printing.
• Transaction & Payment Information: Payment status, transaction IDs, SimplePay verification codes (we never store credit card numbers).
• Technical & Telemetry Data: IP address, browser type, device information, and anonymous session telemetry.

3. Purposes & Legal Grounds for Processing

We process personal data based on the following legal grounds pursuant to GDPR Article 6:

• Performance of a Contract (Art. 6(1)(b)): Order processing, manufacturing personalized products, delivery, and customer notifications.
• Legal Obligation (Art. 6(1)(c)): Accounting, taxation, and statutory electronic invoice retention (Számlázz.hu).
• Legitimate Interests (Art. 6(1)(f)): Prevention of fraud, platform security, and technical error monitoring.
• Consent (Art. 6(1)(a)): Newsletter subscriptions, Google Analytics, and optional marketing cookies.

4. Data Processors & Third-Party Service Providers

To fulfill orders and provide services, data is shared exclusively with verified GDPR-compliant service providers:

• Shipping Logistics: Magyar Posta Zrt. (MPL) – package shipment and delivery.
• Payment Processing: OTP Mobil Kft. (SimplePay) – secure payment gateway.
• E-Invoicing: KBOSS.hu Kft. (Számlázz.hu) – electronic invoice generation and tax compliance.
• Cloud Infrastructure: Google Cloud Platform & Firebase – encrypted European data storage.

5. Data Retention Periods

In accordance with statutory regulations, accounting records and invoices are retained for 8 years. Uploaded graphics and print files are retained only as long as necessary for production, quality assurance, and customer service re-orders.

6. Your Rights Under GDPR

You have the right to request access to, rectification of, or erasure of your personal data, as well as the right to restrict processing, object to processing, and data portability. You also have the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH, https://naih.hu).