Privacy Notice

Effective from: July 10, 2026

1. Data Controller Details

Company name: Kenderesi és Társai Kft
Registered office: 3100 Salgótarján, Rákóczi út 135.
Company registration number: 12 09 001698
Tax number: 11200819-2-12
E-mail: [email protected]
Phone number: 003632441255

(hereinafter referred to as the “Data Controller”)

2. Purpose of Data Processing

The Data Controller sells auto parts online and therefore processes personal data in connection with the operation of the webshop for the following purposes:

• registration and management of user accounts;
• processing and fulfilment of orders;
• invoicing;
• processing payments;
• organising delivery;
• customer service communication;
• warranty and guarantee administration;
• compliance with legal obligations;
• sending marketing communications (based on consent);
• ensuring the operation and security of the website.

3. Categories of Personal Data Processed

3.1. In the Case of an Order

• name;
• billing address;
• shipping address;
• phone number;
• e-mail address;
• order details;
• purchase history.

3.2. In the Case of Registration

• name;
• e-mail address;
• password (in encrypted form);
• data related to the user account.

3.3. In the Case of Contact

• name;
• e-mail address;
• phone number;
• content of the message.

3.4. Vehicle Identification Data

In order to select the appropriate part, the Data Controller may process:

• vehicle registration number;
• vehicle identification number (VIN);
• vehicle type, make and year of manufacture.

These data are used exclusively for checking part compatibility and preparing quotations.

4. Legal Basis for Data Processing

The legal basis for data processing is one of the following:

Performance of a Contract

Pursuant to Article 6(1)(b) of the GDPR:

• accepting orders;
• processing payments;
• delivery;
• customer service.

Legal Obligation

Pursuant to Article 6(1)(c) of the GDPR:

• retention of accounting documents;
• compliance with consumer protection obligations.

Legitimate Interest

Pursuant to Article 6(1)(f) of the GDPR:

• fraud prevention;
• IT security;
• enforcement of legal claims.

Consent

Pursuant to Article 6(1)(a) of the GDPR:

• newsletters;
• sending marketing messages.

5. Data Processors

The Data Controller may use the following types of data processors:

Courier Services

• MPL Magyar Posta

Payment Service Providers

• Only advance bank transfer is available (the Data Controller's account-holding bank is OTP Bank Zrt.)

Dealer Management System:

• Turbosoft Informatikai Kft.

Hungary

Budapest

Hősök fasora 50.

Hosting Provider

• ErdSoft DOO.

Serbia

Subotica

Zombori út 33a

Accountant

• Szakértelem T és T Kft.

Hungary

Salgótarján

Rákóczi út 42.

Data processors may process personal data exclusively in accordance with the instructions of the Data Controller.

6. Data Retention Period

Data Category	Retention Period
Registration data	Until the account is deleted
Order data	5 years following the termination of the contract
Accounting documents	8 years
Marketing consent	Until withdrawn
Complaint handling documents	3 years

7. Cookies

The webshop uses cookies:

Strictly Necessary Cookies

These cookies are necessary for the proper operation of the website.

Analytics Cookies

These cookies are used to analyse website traffic.

Marketing Cookies

These cookies enable the display of personalised advertisements.

The Data Controller requests prior consent for the use of non-essential cookies.

8. Rights of Data Subjects

The data subject is entitled to:

• request information about the processing of their personal data;
• access their personal data;
• request rectification of their personal data;
• request erasure of their personal data;
• request restriction of data processing;
• object to data processing;
• exercise their right to data portability;
• withdraw their consent at any time.

9. Right to Lodge a Complaint

If the data subject believes that their rights have been infringed in connection with the processing of their personal data, they may lodge a complaint with:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11.
Website: https://www.naih.hu

The data subject may also seek judicial remedy.

10. Data Security

The Data Controller applies appropriate technical and organisational measures to protect personal data, including in particular:

• SSL encryption;
• access control;
• regular backups;
• virus protection;
• access logging.

11. Amendments to this Privacy Notice

The Data Controller reserves the right to amend this Privacy Notice. The amended version will be published on the webshop website.