Privacy statement


Stay in touch with us after GDPR!

You may have heard that the General Data Protection Regulation is coming to effect soon. Please let us introduce what changes will affect you as our customer.



We are committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience. This Privacy Policy applies to the Ghraoui Chocolate Web site and governs data collection and usage.


  1. Purpose of our Privacy Policy

The goal of our Privacy Policy is to provide all necessary information about processing your personal data in a concise, transparent, intelligible and easily accessible form, using clear and plain language.

The legal basis of our duty to communicate information is Article 12 of Regulation 2016/679 of the European Parliament and Council (hereinafter referred to as: GDPR) and Section 20 of Act CXII of 2011 on Data Protection (Hungarian Data Protection Act).


  1. Controller’s data


Name: Ghraoui Csokoládé Manufaktúra Zrt.
Registry number: 01-10-048759
Registered seat: 1054 Budapest, Szabadság tér 7. Platinum Torony. ép. 8. em
Tax number: 25481730-2-41
Phone number: +36 1 611 7780


  1. What kind of personal data do we collect from you?

We collect personally identifiable information, such as your e-mail address, name, home or work address or telephone number. We possibly collect information about your shopping habits and special events of the year such as the purchase’s day, prize, products bought and the date of your friend’s birthday. We also collect anonymous demographic information, which is not unique to you, such as your ZIP code, age, gender, preferences, interests and favourites.

There is also information about your computer hardware and software that is automatically collected by us. This information can include: your IP address, browser type, domain names, access times and referring Web site addresses. We use this information for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the Ghraoui Chocolate Web site.

Please keep in mind that if you directly disclose personally identifiable information or personally sensitive data through Ghraoui Chocolate public message boards, this information may be collected and used by others. Note: we do not read any of your private online communications.

We encourage you to review the privacy statements of Web sites you choose to link to from Ghraoui Chocolate so that you can understand how those Web sites collect, use and share your information. We are not responsible for the privacy statements or other content on Web sites outside of the Ghraoui Chocolate and Ghraoui Chocolate family of Web sites.


  1. For what purposes do we process your personal data?

We collect and use your personal information to operate the Ghraoui Chocolate Web site and deliver the services you have requested. We also – based on your explicit consent, within the frames of VIP membership – use your personally identifiable information to inform you of other products or services available from Ghraoui Chocolate and its affiliates. We may also contact you via surveys to conduct research about your opinion of current services or of potential new services that may be offered.


  1. Possible recipients of your personal data

We do not sell, rent or lease our customer lists to third parties. We may, from time to time, contact you on behalf of external business partners about a particular offering that may be of interest to you. In those cases, your unique personally identifiable information (e-mail, name, address, telephone number) is not transferred to the third party. In addition, we may share data with trusted partners to help us perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to Ghraoui Chocolate, and they are required to maintain the confidentiality of your information.

We do not use or disclose sensitive personal information, such as race, religion, or political affiliations, without your explicit consent.

We will disclose your personal information, without notice, only if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on Ghraoui Chocolate or the site; (b) protect and defend the rights or property of Ghraoui Chocolate; and, (c) act under exigent circumstances to protect the personal safety of users of Ghraoui Chocolate, or the public.


  1. Legal basis of processing your

If you contact us in connection with calling a proposal or ordering, processing is necessary in order to take steps at the request of you prior to entering into a contract (Article 6 paragraph (1) point b) of GDPR).

In case of performing orderings or providing personal services, processing is necessary for the performance of a contract to which you are party (Article 6 paragraph (1) point b) of GDPR).

If we – within the frames of VIP membership – inform you of personalised products or services available from Ghraoui Chocolate and its affiliates, the legal basis is your explicit consent to process your personal data for this purpose (Article 6 paragraph (1) point a) of GDPR).

In our view, it is your legitimate interest to get information about services convenient to your preferences and making not only you but those friends of yours happy who you order presents for. Also, it is our legitimate interest to get to know our customer’s purchasing habits; with the knowledge of such information, it is possible for us to provide you new products of your personal preferences. To sum it up, during our communication, the legal basis of processing personal data is our, your, and your friend’s legitimate interest (Article 6 paragraph (1) point f) of GDPR).


  1. Use of cookies

The Ghraoui Chocolate Web site use “cookies” to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a Web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize Ghraoui Chocolate pages, or register with Ghraoui Chocolate site or services, a cookie helps Ghraoui Chocolate to recall your specific information on subsequent visits. This simplifies the process of recording your personal information, such as billing addresses, shipping addresses, and so on. When you return to the same Ghraoui Chocolate Web site, the information you previously provided can be retrieved, so you can easily use the Ghraoui Chocolate features that you customized.

You have the ability to accept or decline cookies. Most Web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Ghraoui Chocolate services or Web sites you visit.


  1. Data protection

We secure your personal information from unauthorized access, use or disclosure. We secure the personally identifiable information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. When personal information (such as a credit card number) is transmitted to other Web sites, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) or HTTPS protocol.


  1. What are your rights?

Right to access: You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the information featured in point 3.

Right to rectification: You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure: You have the right to obtain from us the erasure of personal data concerning you without undue delay and we shall have the obligation to erase personal data without undue delay if it is obligatory according to Article 17 of GDPR.

Right to be forgotten: If we made the personal data public and are obliged to erase your personal data, we inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data

Right to restriction of processing: You have the right to obtain from us restriction of processing if is obligatory according to Article 18 of GDPR.

Right to data portability: You have the right to receive the personal data concerning you, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us if is possible according to Article 20 of GDPR.

Right to complain: You have the right to appeal to the Hungarian courts and to make a complaint to the Hungarian Supervisory Authority (Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.;


  1. Changes to our Privacy Policy

We will occasionally update this Privacy Policy to reflect company and customer feedback. We encourage you to periodically review this Policy to be informed of how we are protecting your information.


Effective: 25th of May 2018