LEGAL INFORMATION / 01
Privacy notice
A plain-language summary of what personal data we process, for what purpose and for how long, and how you can exercise your data protection rights.
This is a translation provided for information. The Hungarian version of this document is the legally binding one.
1. The controller
Full company nameKOLLÁR PAKK Csomagolástechnikai, Ipari és Kereskedelmi Korlátolt Felelősségű Társaság
Short nameKollár Pakk Kft.
Registered office6726 Szeged, Csalogány utca 24.
Company registration number06-09-003646
Tax number11097978-2-06
This notice covers the processing of personal data in connection with the kollarpakk.hu website, its contact and quotation request functions, and the webshop accessible from the website.
2. What data do we process and why?
Name, company name, e-mail address, telephone number, details of the product to be packed or the service requested, the message and any attachment sent voluntarily. Purpose: answering the enquiry, technical consultation, preparing a quotation. Legal basis: steps prior to entering into a contract [Article 6(1)(b) GDPR] or, for business contact persons, the legitimate interests of the parties [Article 6(1)(f) GDPR].
Name, billing and delivery details, contact details, products ordered, payment and fulfilment information. Purpose: fulfilling the order, invoicing, delivery, handling complaints and warranty claims. Legal basis: performance of a contract [Article 6(1)(b) GDPR] and legal obligation [Article 6(1)(c) GDPR]. Kollár Pakk does not store bank card data; it is processed by the selected payment service provider.
Name and position of the contact person, business contact details, correspondence and data relating to the business matter. Purpose: maintaining contact with contractual partners and documenting the cooperation. Legal basis: the legitimate interests of the parties [Article 6(1)(f) GDPR].
Name, e-mail address, subscription and unsubscription data. Processed only on the basis of separate, voluntary consent [Article 6(1)(a) GDPR]. Consent may be withdrawn at any time without giving reasons.
Name, contact details, CV, qualifications, professional experience and any application data provided voluntarily. Purpose: conducting the selection process. Legal basis: steps prior to entering into an employment contract [Article 6(1)(b) GDPR]; retention for future vacancies only with separate consent.
IP address, time of visit, page requested, response code, basic browser and device data. Purpose: secure operation of the website, troubleshooting and prevention of misuse. Legal basis: legitimate interest in providing a secure service [Article 6(1)(f) GDPR].
Important for the quotation request form: your browser uses the data entered to prepare an e-mail on your device. Kollár Pakk receives the data only if you actually send the message from your e-mail client. The website does not upload the selected file automatically; it must be attached to the e-mail separately.
Without the mandatory fields we cannot properly process your quotation request or enquiry. Please do not send special categories of personal data, trade secrets or data relating to third parties unless strictly necessary to handle your request.
3. Recipients and processors
Personal data may be accessed only by authorised Kollár Pakk staff, to the extent necessary for their tasks, and by the following recipients or categories of recipients:
- Rackhost Zrt. (6722 Szeged, Tisza Lajos körút 41.) – hosting and related technical services;
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) – Google Workspace business e-mail and document management;
- IT, payment, invoicing, accounting, courier and logistics service providers engaged to operate the webshop, only with the data needed to fulfil the order concerned;
- where required by a legal, tax or regulatory obligation, the competent authorities, courts and legal representatives.
Kollár Pakk does not sell personal data. Processing outside the European Economic Area may take place only with appropriate safeguards under Chapter V of the GDPR – for example on the basis of an adequacy decision or standard contractual clauses.
4. How long do we keep the data?
For up to 12 months after the matter is closed, unless longer retention is necessary because of a legal claim.
For 5 years after performance or termination of the contract or, in the event of a dispute, until its final resolution.
For 8 years as required by accounting legislation.
Until consent is withdrawn; the minimum data proving the unsubscription may be kept until legal claims become time-barred.
Until the selection process is closed; with separate consent, for up to a further 6 months.
As a rule, for up to 30 days; in the event of a security incident, until the related procedure is closed.
5. Cookies and similar technologies
The current packaging finder does not use advertising or analytics cookies and does not carry out marketing profiling. Technical cookies needed for the security of the service, the session, the operation of the basket or remembering your cookie choice may be used without consent, because the requested function cannot be provided without them.
Security, session, webshop basket and remembering your privacy settings. These cannot be switched off on the site, but can be deleted in your browser.
Can be activated only after prior, voluntary consent. Refusing or withdrawing consent must not restrict the basic functions.
If a new analytics, video, map or marketing tool is introduced in the live WordPress or webshop environment, its provider, cookies, purpose and lifetime must be added to the cookie settings interface and to this notice before it is activated.
6. Rights of the data subject
You are entitled to request access to your personal data and to request its rectification, erasure or the restriction of its processing and – depending on the legal basis – you may exercise your right to data portability and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before the withdrawal.
We do not carry out decision-making or profiling based solely on automated processing that produces legal effects concerning the data subject.
Request to exercise your rights
Write to budapest.iroda@kollarpakk.hu or send your request by post to 6726 Szeged, Csalogány utca 24. We will respond to your request without undue delay and, as a rule, within one month. We only ask for the data necessary to identify you.
7. Complaints and remedies
If you consider that the processing of your personal data infringes your rights, you may first contact Kollár Pakk directly. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or bring the matter before a court.
AuthorityHungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság)
Address1055 Budapest, Falk Miksa utca 9–11.
Postal address1363 Budapest, Pf. 9.
8. Legal background and amendments
This notice has been prepared in particular on the basis of the General Data Protection Regulation (GDPR), the Hungarian Act on the Right to Informational Self-Determination and Freedom of Information (Infotv.), the Hungarian Act on Electronic Commerce Services and the rules on electronic communications. Kollár Pakk updates this notice whenever its processing operations or the legal environment change; the version in force is always available on this page.