Cookie Policy
Version: 2026.10.18-1 · Effective from: 2026. October 18.
This policy explains which cookies and similar technologies the Kalapács online shop (ujsaas.ecco.apps.hu/s/demo-muhely) operated by Kalapács Barkácsáruház Kft. (the “Controller”) uses, for what purposes, and how you can give or withdraw your consent. Details of personal data processing are set out in the Privacy Notice.
1. What is a cookie?
A cookie is a small text file that a website stores on your device (computer, phone) and can read on later visits. This policy also covers technologies that work in the same way as cookies — such as the browser's local storage, tracking pixels and similar scripts (EDPB Guidelines 2/2023).
First-party cookies are set by the Webshop; third-party cookies are set by other providers (e.g. Google or Meta). Session cookies are deleted when you close the browser; persistent cookies remain on your device until they expire.
2. Legal basis: when is consent required?
Under Section 155(4) of Act C of 2003 on electronic communications, storing information on, or accessing information stored in, a user's terminal equipment is only permitted with the user's consent given after clear and comprehensive information, including about the purposes of the processing. No consent is needed for cookies that are strictly necessary to provide a service explicitly requested by the user.
The Webshop loads non-essential cookies and scripts only after your prior, express consent. Consent is voluntary: refusing cookies does not affect your ability to purchase.
3. Cookies used by the Webshop
Strictly necessary cookies
The Webshop cannot function properly without these (cart, login, checkout, security, remembering your cookie choice). They do not require consent; you can block them in your browser, but then purchasing is not possible. Legal basis: Section 155(4) of the Electronic Communications Act (in line with Article 5(3) of Directive 2002/58/EC), GDPR Art. 6(1)(f).
| Cookie | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
vitrin-session | Kalapács | session identifier required for login, checkout and forms | until the browser is closed / 2 hours | first-party |
XSRF-TOKEN | Kalapács | security token against cross-site request forgery (CSRF) | 2 hours | first-party |
vt_cart_82 | Kalapács | keeps the contents of the shopping cart | 30 days | first-party |
vt_consent | Kalapács | stores your cookie consent choice (categories, version, consent ID) | 6 months | first-party |
locale / currency | Kalapács | remembers the language and currency you selected (only if you choose) | 1 year | first-party |
Statistics (analytics) cookies
They help us understand how visitors use the Webshop (e.g. which pages they view, where they come from) so that we can improve the service. They are loaded only with your consent. Legal basis: consent – Section 155(4) of the Electronic Communications Act, GDPR Art. 6(1)(a).
The Webshop currently does not use such cookies.
Marketing (advertising) cookies
Used to measure the effectiveness of our advertising and to show you ads matching your interests on other websites. They are loaded only with your consent. Legal basis: consent – Section 155(4) of the Electronic Communications Act, GDPR Art. 6(1)(a).
The Webshop currently does not use such cookies.
4. Giving and withdrawing consent
- In the banner shown on your first visit, the “Accept all” and “Reject all” buttons are equally prominent; with “Settings” you can decide per category. Nothing is pre-selected; scrolling or continued browsing does not constitute consent.
- Your choice is stored in the
vt_consentcookie for 6 months. After that, or if our cookie policy changes materially (e.g. a new provider is added), we will ask for your consent again. - You can withdraw or change your consent at any time as easily as you gave it, via the “Cookie settings” link in the footer of the Webshop (open cookie settings). Withdrawal does not affect the lawfulness of earlier processing; third-party cookies already set can be deleted in your browser settings.
- To demonstrate consent, we keep a record of your choice (random ID, chosen categories, policy version, time, one-way hash of your IP address) for 3 years (GDPR Art. 7(1)).
5. Google Consent Mode v2
If the Webshop uses Google services (Google Analytics, Google Ads), Google tags start in a “denied” state by default (analytics_storage, ad_storage, ad_user_data, ad_personalization: denied), and Google scripts are loaded only after your consent. If you consent, the Webshop sends Google a signal reflecting your choice.
6. Managing cookies in your browser
You can also delete or block cookies in your browser settings. Guides: Google Chrome, Mozilla Firefox, Safari, Microsoft Edge. If you block strictly necessary cookies, some functions of the Webshop (e.g. the cart) will not work.