Privacy notice

The controller

Your data is handled by this company:

• Name: Nadovi Alkatrész Forgalmazó Kft.
• Registered seat: 2000 Szentendre, Dózsa György út 22.
• Tax number: 32767377-2-13
• Company registration number: 13-09-239263
• General contact: [email protected]
• Privacy questions: [email protected]

What data we handle, and why

• Trial request: your name, your workshop's name, your e-mail address, your phone number and, if you give it, the number of mechanics. Purpose: setting up the trial workshop, sending the login details and keeping in touch.
• Newsletter: your e-mail address. Purpose: we send a newsletter about what is new in ProSzerviz2. Subscription has two steps: your address only goes on the list after you open the link in the confirmation e-mail.
• Consent log: with every trial request we record the acknowledgement of the privacy notice (time, version of the text, your e-mail address), with a newsletter subscription the consent (time, version of the text, your e-mail address, the language). Purpose: to be able to show that you received the notice and that you consented.
• Technical data: your IP address may be recorded in the log of the bot check (Cloudflare Turnstile) and of the service that receives the forms (Cloudflare Worker). We make a one-way fingerprint (hash) of your IP address, salted with a secret key, and store it with the trial request, in the consent log and in the rate limiter; the IP address itself is not stored. Purpose: protecting the forms against abuse and spam.
• Measurement and advertising: tools of Google (Analytics, Ads) and Meta (Pixel), only with your consent. They are not loaded until you consent. Details on the Cookies page.

Legal basis

• Trial request: steps prior to entering into a contract (GDPR Art. 6(1)(b)).
• Newsletter: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time; this does not affect the lawfulness of the handling before the withdrawal.
• Consent log: legal obligation, showing the consent (GDPR Art. 7(1) and Art. 6(1)(c)).
• Technical data (the IP address and its fingerprint): legitimate interest, protecting the forms against abuse (GDPR Art. 6(1)(f)).
• Measurement and advertising (Google, Meta): your consent (GDPR Art. 6(1)(a)).

How long we keep it

• Trial request and the acknowledgement of the privacy notice in the consent log that belongs to it: 1 year, then deleted automatically.
• Newsletter subscription: until you unsubscribe.
• Newsletter consent in the consent log: while the subscription lasts and up to 5 years after you unsubscribe (to show the consent); after that we delete it by hand, periodically.
• Rate limiter entries (the fingerprint of the IP address): deleted automatically after 2 hours.
• Cookie choice (psz_consent): 12 months, in your browser.
• Technical logs: for as long as Cloudflare's logging settings keep them.

Processors and service providers

Your data is handled on our behalf by the providers below, and, in the case of Google and Meta, only with your consent:

• Cloudflare: serving and protecting the website (CDN, proxy), the service that receives the forms (Worker) and its database (D1), and the bot check (Turnstile).
• E-mail hosting provider (mail.ddhosting.eu): the mailboxes and sending of e-mail (SMTP). The trial request confirmation and the newsletter go out through it.
• Google (Analytics, Ads): visit and advertising measurement, only with your statistics or marketing consent.
• Meta (Pixel): advertising measurement, only with your marketing consent.

Data handled in the service

The processors of the data handled on behalf of workshops in the ProSzerviz2 service (such as registration certificate data) are listed on the Data processors page.

The newsletter system

We send the newsletter from our own system, not from an external newsletter provider. We manage the list of subscribers ourselves; the e-mails are delivered through the e-mail provider above. Every e-mail has a one-click unsubscribe.

Transfers outside the EEA

The providers above (in particular Cloudflare, Google and Meta) may also transfer data outside the European Economic Area, for example to the United States. According to the providers, this relies on appropriate safeguards such as the European Commission's standard contractual clauses or an adequacy decision. You can ask for details at [email protected].

Your rights

Send your request to [email protected]; we answer within one month at the latest. You can ask for:

• information about, and access to, the data we hold about you;
• rectification of your data;
• erasure of your data;
• restriction of the handling;
• a copy of your data (portability);
• you can object to handling based on legitimate interest;
• you can withdraw your consent: unsubscribe from the newsletter with the link in the e-mails, and withdraw the measurement consent with the Cookie settings button in the footer.

Complaints and remedies

If you think the handling of your data infringes your rights, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11.; postal address: 1363 Budapest, Pf. 9.; e-mail: [email protected]; website: naih.hu.

You can also go to court; the action can also be brought before the regional court of your place of residence or stay.

Changes

If this notice changes, we publish the new text here, with the date of the update.