Manuela Shala

Privacy Policy - Cookie Policy

Manuela Shala international Trainings

Privacy Policy

Last updated: 14.11.2025

This Privacy Policy is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and applicable European and Hungarian data protection legislation.

This information concerns the use of the website www.manuelashala.com, hereinafter also “Site”, owned by:

Manuela Shala Group Kft
Nyáry Pál utca 10. 3. am. 3. door
1056 Budapest, Hungary
VAT Number: HU32277254
Email: info@manuelashala.com
Data controller: Manuela Shala Group Kft


1. Types of data processed

1.1 Data provided voluntarily by the user

The following personal data voluntarily provided by the user may be collected and processed through the Site:

  • name and surname;
  • e-mail address;
  • telephone number;
  • billing and shipping address (in case of purchase on the shop);
  • customer account and order data (via WooCommerce);
  • any information entered in the text fields of the contact or information request forms.

1.2 Browsing data

During normal browsing, certain technical information is collected, the transmission of which is implicit in the use of Internet communication protocols. This data includes, for example:

  • IP address;
  • type of browser used;
  • pages visited and time of visit;
  • any error codes generated by the Site.

This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning.

1.3 Data collected through cookies

The Site uses technical cookies and, with your consent, third-party cookies. For more information, please refer to the Cookie Policy and the consent management panel provided by Borlabs Cookie.


2. Purposes and legal bases of the processing

Personal data is processed for the following purposes and on the following legal bases:

Purpose Legal basis GDPR Reference
Account registration management and access to the reserved area, if present Performance of a contract or pre-contractual measures Art. 6 (1)(b)
Manage orders, payments, and invoicing via WooCommerce and Stripe Performance of a contract Art. 6 (1)(b)
Response to requests for information or contact sent via the Site Execution of pre-contractual measures at the request of the interested party Art. 6 (1)(b)
Fulfillment of legal, tax and accounting obligations related to sales Fulfillment of legal obligations Art. 6 (1)(c)
Site security, prevention of abuse and fraudulent activities (e.g. reCAPTCHA, hCaptcha, Turnstile) Legitimate interest of the Data Controller Art. 6 (1)(f)
Technical management of the Site and improvement of user experience Legitimate interest of the Data Controller Art. 6 (1)(f)
Sending informational and promotional communications, where applicable Consent of the interested party Art. 6 (1)(a)

3. Methods of processing

Data processing is carried out using IT and electronic tools, using methods strictly related to the purposes indicated above and adopting appropriate measures to ensure the security and confidentiality of personal data.


4. Third-party services that process data

4.1 WooCommerce

Used to manage the online shop, shopping cart, and orders. The data processed includes personal details, contact information, and purchase-related data.

4.2 Stripe

Used for online payment processing. The Site does not directly store or access payment card data. For more information: https://stripe.com/privacy.

4.3 Security systems (Google reCAPTCHA, hCaptcha, Turnstile)

Used to protect forms from automated access and potentially harmful activities. These services may process technical and site usage data.

4.4 External multimedia services

The Site may incorporate content from third-party providers such as YouTube, Vimeo, Instagram, TrustIndex, and Google Fonts. These services may install cookies and collect data, subject to consent via Borlabs Cookie. For further details, please refer to the Cookie Policy.


5. Data retention period

  • Purchase data: retained for the time necessary to manage the contract and for 10 years for accounting and tax purposes.
  • Customer account data: retained until you request deletion of the account or for as long as necessary for the contractual relationship.
  • Contact details: up to 12 months from the request, unless further contractual relationships exist.
  • Technical log data: for limited periods, necessary for the functioning and security of the Site.
  • Cookies: according to the durations indicated in the Cookie Policy.

6. Recipients of personal data

Personal data may be communicated to:

  • technical and IT service providers (hosting, maintenance, security, email);
  • payment service providers (e.g. Stripe);
  • legal, tax or administrative consultants, to the extent necessary to comply with the law;
  • competent authorities, if required by law or by order of the Authority.

The data is not subject to general dissemination or sale to third parties.


7. Transfer of data to non-EU countries

Some service providers (e.g., Stripe, Google, Meta) may process data in non-EU countries. In such cases, the Data Controller ensures that adequate safeguards are implemented, such as:

  • use of Standard Contractual Clauses approved by the European Commission;
  • additional technical and organizational measures;
  • verification of the level of protection offered by the third country.

8. Rights of the interested party

As a data subject, you may exercise the rights set forth in Articles 15–22 of the GDPR at any time, including:

  • right of access to personal data;
  • right to rectification of inaccurate data or integration of incomplete data;
  • right to erasure (“right to be forgotten”), in the cases provided for by the GDPR;
  • right to restriction of processing;
  • right to data portability;
  • right to object to processing based on legitimate interest;
  • right to withdraw consent, where the processing is based on it;
  • right to lodge a complaint with the competent Guarantor Authority.

To exercise these rights, you can contact the Data Controller at the email address: info@manuelashala.com.


9. Protection of minors

The Site is not intended for minors under the age of 16. The Data Controller does not intentionally collect data relating to minors. If it becomes aware of the involuntary collection of such data, it will immediately delete it.


10. Changes to this policy

The Data Controller reserves the right to modify this Privacy Policy at any time, in accordance with applicable law. Any changes will be posted on this page. Users are therefore encouraged to consult it periodically.

For further information on the processing of personal data, you can contact the Data Controller at info@manuelashala.com.