Privacy notice

Controller: Buborek Medve Kft., registered office: 1093 Budapest, Közraktár utca 10 HRSZ 37077/0/A/7. Fsz. IV. ajtó, tax number: 32908330-2-43.

The shop: 1093 Budapest, Czuczor u. 3.. Phone: +36 30 134 9989. E-mail: teaffe@teaffeinfo.com.

When you order, we handle what's needed to fulfil it: your name (for pickup), your phone number or e-mail address (so we can reach you and send the confirmation and receipt), the items and your choices, the pickup time or your table, your note, and the payment method and status.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)). Accounting records (receipts, invoices) are kept for the period required by the Hungarian Accounting Act — currently 8 years; other order data for [retention period — to be completed].

When you order from a table, the table's QR code only tells us which table to bring your drink to.

Card, Apple Pay and Google Pay payments happen on the secure payment page of Stripe (Stripe Payments Europe, Ltd.). We never see or store your card details; we only learn whether the payment succeeded and the transaction ID (needed for refunds).

Receipts — and, on request, invoices — are issued with Számlázz.hu (KBOSS.hu Kft.). For an invoice we pass on the billing name, address and, for companies, the tax number you provide.

For your account we handle your e-mail address and — if you give it — your first name. To sign in, we e-mail you a one-time code that expires shortly.

• your card number, stamps, rewards and favourite drinks;
• your focus stats (minutes, streak, verified sessions) and your coupons;
• your prepaid bundles and the orders they belong to;
• the list of your orders (for one-tap reordering).

If you want a focus session verified on site, your browser — with your permission — shares your position once. We only use it to decide whether you are within 150 metres of the café; we don't store the position, only the result ("verified"). You can also verify with a table QR code — then we don't ask for location at all.

If you order a selfie coffee, the uploaded photo is used only to print it on the foam. Only our staff can see it, and it's deleted automatically at the latest 24 hours after the order. Cropping and preview happen in your browser.

Only upload a photo you have the right to use (and that the people in it agreed to).

When you buy a gift card, we handle the buyer's name and e-mail, the recipient's name and (if given) e-mail, and the message, so the card can be delivered — on the day you choose. The card's balance and use are recorded until it expires.

For a whole-cake request, your name, phone, e-mail, the date, number of servings, the inscription and your note are also forwarded to the partner cake studio making the cake (Teaffe, Zaandra Cake Studio, Egy csipet torta) so they can send a quote.

E-mails are sent via Google Workspace (Google Ireland Ltd.).

• order-related e-mails — confirmation, "ready", cancellation, receipt — are part of the service;
• "How was it?" — one short question after pickup; tell us anytime if you'd rather not get it;
• coupons, reminders and come-back offers — only if you separately agreed (you can switch this off in your account anytime).

The star rating and message after pickup help us improve. The Google review button takes you to Google; what you write there is governed by Google's privacy terms.

The website and its data store run on Netlify (Netlify, Inc.); map tiles are served by OpenFreeMap (your browser's IP address reaches them). Processors: Netlify, Stripe, KBOSS.hu (Számlázz.hu), Google (Workspace, Analytics — only with consent), OpenFreeMap. [safeguards for data transfers (e.g. EU standard contractual clauses) — to be completed after legal review]

We use no advertising cookies.

Our own cookie-free visit measurement: when you arrive on the site, it sends once where you came from (e.g. Instagram, Google Maps, the link's utm_ parameters or the referring site's domain) and which page you landed on. This only becomes a daily aggregate counter — we store no IP address, cookie or device ID, and nothing is written to your browser. If you order, we note this source with the order too (e.g. “Instagram”), so we can see which channel brings guests. Legal basis: our legitimate interest (measuring how the café and its promotion perform).

Google Analytics 4 (Google Ireland Ltd.) runs only if you allow it in the cookie banner: it sets _ga cookies and collects anonymous visit statistics (pages viewed, device type, approximate location), with ad features turned off. Legal basis: your consent; you can withdraw it anytime under "Cookie settings" in the footer — we then delete the cookies. Google retains the data for up to 14 months.

• lang cookie — your chosen language;
• account cookie — to keep you signed in;
• browser storage (localStorage): your cart, the orders you follow, language and install preferences, the focus timer's state;
• service worker cache — so the site is faster and loads even without internet.

You can ask for access to your data, its correction, erasure or restricted processing; you can object, ask for data portability, and withdraw your consent anytime. Write to us: [privacy contact — to be completed].

You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11, naih.hu) or go to court.