Privacy notice
This English text is a courtesy translation. In case of any discrepancy between the Hungarian and the English version, the Hungarian version prevails.
Language. This English text is a courtesy translation. The Hungarian version is the binding one. In case of any discrepancy between the Hungarian and the English version, the Hungarian version prevails.
Prepared under Article 13 of Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 on informational self-determination and freedom of information (Infotv.).
1. Controller
GLOBAL SUPPLY Korlátolt Felelősségű Társaság, 3066 Kutasó, Toldi utca 4., Hungary.
Company registration number 12-09-013290, tax number 26179030-2-12.
E-mail kd@globalsupply.hu, telephone [TO CONFIRM].
No data protection officer has been appointed. The conditions in Article 37 GDPR are not met: we are not a public authority, our core activities do not require regular and systematic monitoring of data subjects on a large scale, and we do not process special categories of data on a large scale.
2. What we process, why, and on what basis
2.1 Quote requests from the website or by e-mail
| Data | company name, contact person's name, e-mail, telephone (optional), shipment details, message text, time of acknowledgement, language, truncated IP address |
| Purpose | answering the enquiry, preparing a quote, documenting our client acquisition channel |
| Legal basis | Article 6(1)(f) GDPR — legitimate interests |
| The interests | (a) responding to a business enquiry addressed to us; (b) documenting how the company acquires clients, which we must be able to evidence in banking, payment-institution and regulatory reviews |
| Balancing | the data subject deliberately submitted their business contact details, in a professional capacity, in order to be contacted. The data set is minimal and professional. Their interests and fundamental rights do not override ours |
Additional basis: section 13/A of Elkertv., which permits processing of identification data for the conclusion, definition, modification and monitoring of a contract.
The checkbox on the form is not consent. It confirms that you have read this notice. The legal basis is legitimate interests, and you therefore have the right to object (see section 6).
2.2 Conclusion and performance of a contract
Contact and invoicing data, processed under Article 6(1)(b) where the client is a sole trader, and under Article 6(1)(f) for the contact person's data where the client is a legal entity.
2.3 Accounting records
Data on accounting documents, processed under Article 6(1)(c) — section 169 of Act C of 2000 on accounting.
2.4 Server logs
Truncated IP address, timestamp, requested path, error code. Article 6(1)(f) — legitimate interest in operating and securing the website.
3. Is providing data mandatory
Completing the fields marked as required is a condition of receiving a quote. Without them we cannot answer the enquiry. There is no statutory or contractual obligation to provide data.
4. Retention
| Data | Period |
|---|---|
| Quote request, no contract concluded | 12 months from receipt |
| Quote request, contract concluded | 8 years after the contract ends (Act C of 2000, s. 169) |
| Accounting documents | 8 years |
| Server logs | 30 days |
| Anonymised channel log (below) | indefinitely |
Anonymised channel log. After the period above we delete the personal data but keep a record that cannot identify a person: date, time, country of origin and destination, service type, source. The key linking that record to the personal data is destroyed together with the personal data, so the record can no longer be related to a natural person and falls outside the GDPR.
5. Who has access
Processors: Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) — hosting and e-mail, under a written agreement meeting Article 28 GDPR.
Recipients: to the extent necessary for performance — the carrier, the customs brokerage, and our bookkeeping service.
Third countries. We do not transfer personal data outside the EEA. The only exception is where the destination the client specifies lies outside the EEA and shipment data must be passed to the carrier there; such a transfer is necessary for the performance of the contract (Article 49(1)(b) GDPR).
6. Your rights
Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20, where processing is based on contract), and objection to processing based on legitimate interests (Art. 21).
Exercise them by writing to the e-mail address above. We respond within one month, extendable by two months in justified cases, of which we will inform you. There is no charge.
No automated decision-making or profiling takes place.
7. Remedies
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal: 1363 Budapest, Pf. 9.
Phone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu
Web: https://naih.hu
Under section 23 of Infotv. you may also bring court proceedings, before the county court (törvényszék) of your place of residence or stay, at your choice.
8. Cookies
This website uses no cookies, no localStorage or sessionStorage, no tracking
pixels and no external analytics. We therefore do not ask for cookie consent and display no
cookie banner. Language selection is carried in the URL (/hu/, /en/, /ru/), not
stored on your device. The light and dark appearance works the same way: the choice
travels as a URL parameter (?theme=light, ?theme=dark) and nothing is left on your
device. With no choice made, the site follows your operating system setting.
9. Personal data breaches
We notify NAIH without undue delay and within 72 hours, and inform data subjects where the breach is likely to result in a high risk to their rights and freedoms.
10. Changes
We may amend this notice. The current version, with its version number and date, is always available on the website. We will notify data subjects of material changes.
Version 0.1 — draft, 9 September 2026.