Privacy Policy

1. Data controller

Papasvili György Armen Sole Proprietor (hereinafter: „Controller")

• Registered seat: Alföld utca 18. 2/47, 1081 Budapest, Hungary
• Premises: Hímesháza utca 4, 1182 Budapest, Hungary
• Tax ID: 59315784-1-42
• EU VAT: HU59315784
• Email: info@geparts.hu
• Phone: +36 30 689 3938

2. Data we collect and purpose

When you fill out the contact form on our website, we process the following personal data:

• Name — for contact and identification
• Email address — to reply to you
• Phone number (optional) — for faster contact
• Part number, car model, message — to prepare a quote

When you place an order in the web shop, we additionally process:

• Shipping and billing name, address, phone number — to fulfil the order and issue the invoice
• Company name and (EU) VAT number — only for business purchases, for invoicing
• Order items, amount and payment status — contract performance and accounting obligations

We never process card data: payment happens entirely within Stripe's systems; we only receive confirmation that payment occurred.

3. Legal basis

The legal basis is the data subject's consent under Article 6(1)(a) GDPR, and steps prior to entering into a contract at the data subject's request under Article 6(1)(b) GDPR.

4. How data is transmitted

When the form is submitted, the data is sent directly via your own email client to info@geparts.hu. No data processing or database storage takes place on the website — the site simply prepares a pre-filled email message.

5. Retention period

The Controller retains received email messages for as long as necessary to fulfill the purpose of the inquiry, but no longer than 5 years. Order data and issued invoices are retained for 8 years as required by the Hungarian Accounting Act. Data is deleted thereafter.

6. Processors and data sharing

We use the following processors / independent controllers to fulfil orders:

• Stripe Payments Europe Ltd. (Dublin, Ireland) — online payment; Stripe processes payment data as an independent controller
• Billingo Technologies Zrt. (Budapest, Hungary) — electronic invoicing; invoice data is also reported to the Hungarian tax authority (NAV) as required by law
• Resend, Inc. (USA, with EU data region) — transactional emails (order confirmation, shipping notice)
• Cloudflare, Inc. (USA) — hosting and the order-records database (data stored in the EU region)
• Courier service — name, address and phone number, to the extent necessary for delivery
• Google Ireland Limited (Dublin, Ireland) — Google Customer Reviews: only if you separately opt in after your purchase (see below)

Google Customer Reviews. After a successful payment, the order confirmation page offers you the option of receiving an email survey from Google once your order has been delivered. This is voluntary: you can decline with one click, in which case no data is sent to Google for this purpose. If you opt in, Google receives your email address, the order ID, the delivery country and the estimated delivery date — solely in order to send the survey. The legal basis is your consent (GDPR Article 6(1)(a)), which you may withdraw at any time. Google processes this data as an independent controller under its own privacy policy. Your rating may appear anonymously and in aggregate on Google Search and Shopping surfaces. When the survey module loads, Google — as a third party — may place and read cookies in your browser, or use web beacons or similar technologies to collect the information needed for this. Cookie management and your options are described under 7. Cookies; you can also restrict or delete them at any time in your browser settings. To opt out or withdraw consent, write to info@geparts.hu.

Beyond this we do not share your data with third parties, except where required by law (e.g. official requests).

7. Cookies and local storage

This website uses no tracking or analytics cookies and no third-party advertising tools. The browser's local storage (localStorage) holds only functional data that never leaves your device:

• gp_cart — cart contents (product IDs and quantities)
• gp_country — selected shipping country
• gp_consent_v1 — acknowledgement of the notice bar

This data is not transmitted to our server (cart contents only when you start payment) and can be removed at any time by clearing your browser data. Stripe's checkout page (checkout.stripe.com) may use its own cookies for payment security — see Stripe's privacy policy for details.

Analytics cookies: the site may use Google Analytics 4 to measure traffic. These cookies are only set if you choose "Accept all" on the cookie bar (Art. 6(1)(a) GDPR — consent). Without consent, Google Consent Mode remains in the denied state and no measurement takes place. You can change your decision at any time via the "Cookie settings" link in the footer.

8. Your rights

Under GDPR, you have the following rights:

• Right to information
• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object

To exercise your rights, write to info@geparts.hu.

9. Right to lodge a complaint

If you believe our data processing violates your rights, you may lodge a complaint with the Hungarian Data Protection Authority (NAIH):

• NAIH — Falk Miksa utca 9-11, 1055 Budapest, Hungary
• Web: naih.hu

10. Changes

The Controller reserves the right to amend this notice unilaterally. Amendments take effect upon publication on the website.