1. Controller
Controller: SAP KFT
Address: 9700, Szombathely, Szövő u. 100.
Email: contact@sapkft.hu
Phone: +36 30 119-3342
2. Principles and scope
Personal data are processed lawfully, fairly, transparently, for specified purposes and only to the extent necessary. Accuracy, confidentiality and appropriate security are maintained. This notice covers visitors, enquirers, customers and persons acting on their behalf.
3. Enquiries and customer service
Data: name, email, phone, message and case-related information.
Purpose: answering enquiries, preparing quotations and communication.
Legal basis: pre-contractual steps, contract performance or legitimate interests; consent is used only where specifically requested.
Retention: until closure of the matter and, where claims may arise, until expiry of the limitation period.
4. Orders, contracts and delivery
Data: name, billing and delivery address, email, phone, order details, payment status and communications.
Purpose and basis: contract preparation and performance, delivery and customer information. Required data are necessary for contracting.
Retention: until expiry of civil-law claims and, for accounting documents, for the statutory period.
5. Payment and invoicing
Payment providers may process identification, transaction and fraud-prevention data as independent controllers or processors. The webshop does not store full card details. Mandatory invoice data are processed under a legal obligation and transmitted to the configured invoicing provider.
6. Complaints, withdrawal and legal claims
For complaints, withdrawal or conformity claims, we process identification, order, claim, evidence and settlement data. The legal basis is legal obligation, contract performance and legitimate interests in establishing or defending legal claims.
7. Technical data and browser storage
The server may log IP address, time, requested resource and browser/device information for security and troubleshooting. Cookies, localStorage and sessionStorage may support language, cart and checkout. Details are in the Cookie and Local Storage Notice.
8. Recipients and processors
Access is limited to personnel who need it and relevant hosting, email, payment, invoicing, delivery, IT support, accounting and legal service providers. Hosting provider: QTC Ce kft, 9700, Szombathely, Szövö u. 100., info@qtruck.hu. The actual recipient list depends on configured and used services.
9. International transfers
The Controller aims to use EEA-based services. Transfers outside the EEA may occur only under a GDPR adequacy decision, appropriate safeguards such as standard contractual clauses, or another lawful mechanism.
10. Data subject rights
You may request access, rectification, erasure, restriction and portability, object to processing based on legitimate interests, and withdraw consent at any time. Requests may be sent to contact@sapkft.hu and are generally answered within one month.
11. Complaints and judicial remedy
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or seek judicial remedy. Current details: 1055 Budapest, Falk Miksa utca 9–11.; postal address 1363 Budapest, Pf. 9.; official website naih.hu.
12. Security and updates
Appropriate technical and organisational safeguards are applied, including access control, logging, backups and encrypted transport where applicable. This notice may be updated when services or law change. Effective: 2026-08-04.