The purpose of this Policy is to provide you with a clear overview of the data processing taking place at This Policy has been prepared in accordance with the requirements of the EU General Data Protection Regulation (EU 2016/679).


Data controller’s contact:

Drops AG Ltd.

1034 Budapest San Marco u. 49. Hungary

Tax number: HU26335481

Postal address: 1034 Budapest San Marco u. 49. Hungary

Phone number: +36 209604393



List of data processors and data service providers:


IT service: Gergely Hollódi, postal address: 1034 Budapest, San Marco u. 49. Hungary, phone +36 20 9 604 393,

E-mail: aromabotanica@gmailcom

Web hosting:

Address: 500 Terry A Francois Boulevard, 6th Floor, San Francisco, CA 94158, USA

Phone +1 415-329-4609


E-mail marketing Service:, 500 Terry A Francois Boulevard, 6th Floor, San Francisco, CA 94158, USA

Available online payment service provider: PayPal, address: 12312 Port Grace Blvd, La Vista, NE 68128


Purpose of data processing


Ensure the proper usability and high-quality operations of the website; monitor and improve the quality of the services; identify and resolve possible security risks occurred during the operation of the website, and finally record the website visits for statistical purposes.


The legal basis for personal data processing


The primary legal basis for data processing is to validate and you as one of the users’ rights for receiving quality information (summarized as “the service”). We may have further obligations to process your data specified and regulated by EU, and Hungarian Laws. This information on the duration of data processing is available under the session title: „ Time limitation of the data processing”.


The data controller during the operation of the website is committed to abiding established principles of the EU and Hungary’s data protection and privacy laws and regulations, namely principles of transparency, purpose limitation, data minimization, accuracy, and accountability).


Time limitation of personal data processing


When using this website, your personal information is recorded by IT systems (ISPs, server, website) to the extent required for its technical operation. This includes, among other things, a chance for the public authorities to investigate possible IT frauds and crimes.


The basic service of the website is free of charge, and the use of it is not subject to registration. If you select the registered content for watching, you may view them for 14 days free of charge by submitting your full name and email address. If you prefer watching the content of the website without time limitation, you may subscribe with a fee.


For the sake of transparency, the time limitation of the data processing related to the operation of the website made available, in the Annex to this Policy.


Recipients and their categories


Your personal information will not be disclosed to third parties other than staff members of and listed data processors. All staff members sign a confidentiality disclaimer before engaged. Apart from the data processing that is taking place in Hungary, and in the US by registered service providers, your personal data will not be transferred to third countries.


About using cookies


This website uses Google Analytics (“Google”) Google Analytics to analyze visitors. Google Analytics is storing so-called „Cookies” – simple, short, small text files – on your IT device and analyzes the visibility of our website to help improve our website to enhance user experience. Data on the visit of a website in the “cookie” (along with the time of visit and your IP address) will be transmitted and deposited on Google’s US servers.


Google uses this data to evaluate, report on your site visits, and to offer services related to the website and to the Internet. Users who do not want Google Analytics to report on their visits can install the Google Analytics opt-out browser extension.


This add-on instructs Google Analytics JavaScript scripts (ga.js, analytics.js, and dc.js) not to send visitors information to Google.


Additionally, users who have installed the Disabling Browser Extension may not participate in content tests either.

To disable Analytics’s web activity, visit the Google Analytics opt-out page ( and install the plugin for your browser.


For more information on installing and uninstalling the extension, see the help for that browser you use. 


GDPR provides the following rights to the users of the site:


The right of access which means you have the right to know whether this website process data concerning you and if so, provide access to it.

Right to rectification: you are always entitled to request correction of our personal data that we have processed but incorrectly recorded. We will correct your personal information without undue delay and request the completion of incomplete personal data.


Right to erasure or right to be forgotten: You are entitled to request the deletion of personal data processed by Us, if your consent has been withdrawn, the contractual relationship has been terminated. The deletion does not cover any document(s)/data that we may have required to process in order to comply with the law. In this case, personal data cannot be deleted.


The right to the restriction of processing: We are required to restrict the processing of your personal data upon request. If it can be rightfully assumed that the deletion of the information available on you would harm your legitimate interest, then the exercise of this right has to be limited. As a limited piece of data, we have to process that data until legitimate purpose or legitimate interest stands and excludes the deletion of that personal data.


Right to data portability: You may request access to personal data processed by us or ask for forwarding it to another service provider.

The right of withdrawal of your consent: You are entitled to withdraw your consent to any data processing at any time, with due attention to valid statutory and contractual obligations, your data will be deleted from our system.


File a complaint


If you may have a complaint about the processing of your personal data, you can do it via the e-mail. Our employees investigate your complaint within 25 days and answer your question. If you cannot find a jour answer substantive, you may also refer to national privacy protection offices, namely:


In Hungary to the National Data Protection and Information Authority

Head office: 1125 Budapest, Szilágyi Erzsébet fasor 22 / c.

Postal address: 1530 Budapest, Pf .: 5.

Phone: +36 (1) 391-1400

Fax: +36 (1) 391-1410




If you are a citizen of another state, you may raise any complaints concerning the operation of the website at your national authority.

You are entitled to apply for a court in case of infringement. The User may exercise his rights in Hungarian courts based on the Hungarian Civil Code (5/2013).


Use of this website


If you do not approve of the processing of your personal data under the above conditions, our services will not be available to you. During the operation of the Website, it strives to operate transparently through the practical implementation of the principles of data minimization and accountability.


Thank you for your kind attention.


We hope to welcome you soon as our registered user!




Functions of the website, categories of personal data

Purpose of processing

Legal basis

Time limitation



IP   address of your computer, phone, etc.

Provide user experience

Validating the legitimate interest of a user of the website for quality services and information GDPR Article 6 (1) (f)

Automatically recorded IP addresses are stored for up to 7 days after recording



Full name, e-mail address, address, transaction number, and date, transaction contents, for billing purposes: full name, address, tax id, product name, quantity, payment method.

Ensure the proper and high-quality operation of the website, monitor and improve the quality of service, identify potential security risks, measure website visits (traffic) and produce statistics. Webstore orders, invoicing, customer database, fulfilling orders, payment documentation, fulfilling accounting requirements, customer relations.

Your informed consent – GDPR Article 6 (1) (a)

Until the registration is canceled or the consent is withdrawn. Data related to purchased products or services via the website: until the order is fulfilled, and for 5 years according to Hungarian Civil Code § 6:22, elsewhere, for 8 years if data processor required by section 2 of § 169 of the Act on Accounting



Full name, e-mail address, and other non-mandatory data

By analyzing your user habits, we send personalized business offers, and we’ll let you know about the products and services we sell

Your informed consent – GDPR Article 6 (1) (a)

Unsubscribe any time



Full name, date of birth (To verify that you are above 16 or 18 years of age), e-mail address, and other non-mandatory data

By analyzing your user habits, we send personalized business offers, and we’ll let you know about the products and services we sell

Your informed consent – GDPR Article 6 (1) (a)

Unsubscribe any time




Full name, date of birth (To verify that you are above 16 or 18 years of age), e-mail address, and other non-mandatory data

Necessary data processing in order to effectively respond and investigate submitted remarks and   complaints

Legal obligation by law GDPR Article 6 (1) (c)

Protection of consumer rights: 5 years