Privacy Policy

Effective Date: 05.01.2026

1. Introduction
Datahouse Kft. is committed to protecting the personal data of its clients and partners, and considers it paramount to respect its clients' right to informational self-determination. Personal data is handled confidentially, and the company takes all security, technical, and organizational measures required to guarantee data security.

Datahouse Kft., as data controller and data processor, considers the contents of this legal notice to be binding upon itself. It undertakes to ensure that all data processing related to its activities complies with the requirements set forth in this policy and in applicable legislation. Its data processing principles are in harmony with current data protection laws, in particular the following:

Datahouse Kft. reserves the right to amend this policy at any time. Naturally, it will notify users of any potential changes in a timely manner.

Details of the Data Controller:
Company Name: DATAHOUSE Kft.
Registered Office: 1171 Budapest, Óvónő utca 52.
Premises: 1171 Budapest, Óvónő utca 52.
Website: www.carinfo.hu, www.carinfoeu.com
Contact Person: István Bisztriánszky
Phone: +36 1 253 0030
E-mail: data@datahouse.hu

2. Purpose, Legal Basis, and Duration of Data Processing
In the course of its activities, Datahouse Kft. processes personal data for the following purposes and based on the following legal bases:

2.1. Users
The processed data is necessary for the performance under contract of providing data, analyses, and reports supplied by Datahouse Kft.
Scope of personal data processed:

Legal basis of data processing: Article 6(1)(b) of the GDPR: necessary for the performance of a contract
Duration of data processing: 1 year from the last performance under the contract.

2.2. Contact Persons
The processed data is necessary for obtaining basic data required for providing Datahouse Kft.'s services, contracts, their preparation, execution, invoicing, and closure.
Prior to data processing, Datahouse Kft. conducted a legitimate interest assessment (balancing test), which concluded that its legitimate interest as data controller restrict the data subject's privacy in a proportionate and justified manner. The legitimate interest assessment test will be made available upon request to the data subject.

Scope of personal data processed:

Legal basis of data processing: Article 6(1)(f) of the GDPR: legitimate interest. The legitimate interest of the data controller is to maintain records of contact details for the performance of the contract.
Duration of data processing: 8 years from the last performance under the contract.

2.3. Inquiries Received via E-mail and Form Completion
The processed data is necessary to provide information regarding the contents of Datahouse Kft.'s services and test access. If inquiries are received that are not within the scope of services, the submitted data will be deleted immediately.

Our products and services are not intended for individuals under the age of 16; we request that individuals under 16 do not provide personal data to the Data Controller. If we become aware that we have collected personal data from a child under 16, we will take steps to delete the data as soon as possible.
Scope of personal data processed:

Legal basis of data processing: Article 6(1)(b) of the GDPR: necessary for pre-contractual steps
Duration of data processing: 6 months after the conclusion of the necessary extent of communication.

2.4. Personal Data Related to Invoicing and Contracts
Datahouse Kft. generally provides its services to legal entities, so the financial and legal documents associated therewith do not contain personal data. Should personal data nevertheless be processed:
Scope of personal data processed:

Legal basis of data processing: Article 6(1)(c) of the GDPR: necessary for compliance with a legal obligation
Duration of data processing: 8 years from contract closure pursuant to Section 169 (2) of Act C of 2000 on Accounting.

3. Other Data Processing
Information regarding data processing operations not listed in this policy will be provided at the time of data collection. We inform our clients that courts, prosecutors, investigative authorities, misdemeanor authorities, administrative authorities, the presiding authority, or other bodies authorized by legislation may contact the data controller for the purpose of providing information, disclosing/transferring data, or providing documents. Datahouse Kft. will release personal data to authorities—provided the authority has specified the exact purpose and scope of data—only to the extent indispensably necessary to achieve the purpose of the request.

4. Data Processing (Processors)
DATAHOUSE Kft. engages subcontractors to carry out its activities. Subcontractors may have access to users' data for contact and technical support purposes necessary for contract execution and service provision.

A written agreement between the data controller and data processor regulates the scope and purpose of data that can be used by the processor, as well as the processor's activities with them. The data processor may only execute instructions recorded in writing. Employees involved in handling personal data are bound by confidentiality obligations.

Based on the decision of the data controller, the data processor shall return all personal data to the controller or delete it, including existing copies, with one exception: if Member State or EU law mandates storage of the data.
The data processor facilitates and enables audits and on-site inspections conducted by the data controller or an auditor commissioned by it.

Current details of Data Processors having access to your personal data will be communicated upon request. Our company will fulfill your request without undue delay, but at the latest within one month of receipt, via a letter sent to the specified contact address, or in the case of an electronic request, to your electronic mail address.
Hosting Provider: Rackhost Zrt.: 1132 Budapest, Victor Hugo utca 18-22., tel.: +36 1 445 1204, email: info@rackhost.hu.
Accounting Company: WIDD Kkt., 1171 Budapest, Peregi utca 98., tel.: +36 1 258 1103, e-mail: iroda@torturabt.hu

 

5. Server Logging
When visiting the carinfo.hu and carinfoeu.com websites, the web server automatically logs the activity of registered users.

Purpose of data processing: during visits to the website, the service provider records visitor data to verify service operations, refine and supplement visitor searches, provide personalized service, and prevent abuse.
Scope of data processed: identification number, date and time of visit, URL of the visited page, user's computer IP address.
An IP address is a sequence of numbers by which computers accessing the internet can be uniquely identified. With IP addresses, the visitor using the given computer can even be localized geographically. The URL of visited pages, along with date and time data, are not suitable on their own to identify the data subject; however, combined with other data (e.g. provided during registration), they can be used to draw conclusions regarding the user.

Data processing related to logging by external service providers:
The HTML code of the portal contains links originating from and pointing to external servers independent of Datahouse Kft. The external service provider's server connects directly to the user's computer. We call our visitors' attention to the fact that providers of these links are capable of collecting user data (e.g. IP address, browser, operating system data, mouse movement, visited page URL, and visit timestamp) due to direct connection to their server and direct communication with the user's browser.

The legal basis for logging is Article 6(1)(f) of the GDPR, i.e., the legitimate interest of the Data Controller (maintaining the IT security of the website and preventing abuse).

6. Cookie Management
Cookies are short text files placed by visited websites (web server) in the browser of your computer or mobile device. Cookies are widely used for proper and secure operation of websites, improving user experience, and gathering statistical data.

Cookies may be "persistent" or "session" cookies. Persistent cookies are stored by the browser until a specified expiration date, unless deleted earlier by the user, while session cookies are not stored by the browser and are automatically deleted when closing the browser.

6.1. Categories and Legal Basis of Cookies Used by Us

On the carinfo.hu and carinfoeu.com portals, we primarily use two categories of cookies:

a) Strictly necessary (essential) cookies:

These cookies are essential for the secure and proper functioning of the website and services (e.g., page navigation, access to secure areas of the website). The website cannot function properly without these cookies.

Legal basis of data processing: Legitimate interest of the Data Controller [Article 6(1)(f) of the GDPR], and Section 13/A (3) of Act CVIII of 2001 on Electronic Commerce Services.

Consent: Your prior consent is not required for the use of these cookies; however, you may block them in your browser (in which case certain functions of the website will not work).

b) Statistical and analytical cookies:

These cookies (e.g. Google Analytics) collect information about how visitors use the portal. Their purpose is to measure website performance and improve user experience. Data is collected in an anonymized form.

Legal basis of data processing: Your prior, voluntary, and explicit consent [Article 6(1)(a) of the GDPR].

Consent management: These cookies are inactive by default and will only be loaded onto your device if you explicitly consent via the pop-up cookie banner upon your first visit to the website. You may withdraw or modify your consent at any time without restriction in the appropriate menu of the website.

6.2. Specific Cookies Stored by the Portals

CISESSION: Strictly necessary (session) cookie. Facilitates essential features of the websites, guaranteeing a secure session. Lifespan: until closing the browser (session expiration).

ACCEPTED_COOKIES: Strictly necessary cookie. Stores acceptance information regarding cookies, preventing the cookie panel from reappearing unnecessarily. Lifespan: 1 year.

_ga, _ga_[measurement_id] (Google Analytics 4): Statistical cookies. Activated only with your explicit consent. These cookies belong to the Google Analytics 4 (GA4) service and collect information about how visitors use the website (e.g. number of visits, time spent on site, clicks). The _ga cookie serves to distinguish visitors, while _ga_[measurement_id] maintains current session state. Google Analytics 4 anonymizes IP addresses by default, so direct personal identification of visitors is not possible.
Lifespan: The _ga and _ga_[measurement_id] cookies are stored in the browser for up to 2 years by default (which may be shorter depending on settings).

6.3. Blocking, Deleting Cookies, and Modifying Browser Settings

If you wish to modify settings for consent-based cookies, you may do so at any time by clicking on the "Cookie Settings" link located at the bottom left (or footer) of our website.

In addition, you can block or delete cookies in your browser settings. Please note that if you block or delete strictly necessary cookies, certain basic functions of the website (e.g. login) will not be available.

For detailed information on managing browser settings properly, please check the "Help" menu of your browser (Google Chrome, Firefox, Microsoft Edge, Safari, etc.) or visit www.allaboutcookies.org.

7. Data Security
We inform you that we have taken necessary technical and organizational measures, and established and operated procedural rules required to ensure adequate protection of your personal data.

To prevent unauthorized access, access can only be authorized or configured by Datahouse Kft. Login requires a username and password, the latter stored in an irreversible manner by our system. After logging in, users can only view their own stored data, preventing bulk data theft via this interface. To prevent external access, the system is protected by firewalls.
To prevent accidental destruction of data, we perform regular backups.

The IT systems and networks of Datahouse Kft. and its partners are protected against computer-assisted fraud, espionage, sabotage, vandalism, fire and flood, as well as computer viruses, break-ins, and denial-of-service attacks. The operator ensures security through server-level and application-level protection procedures.

We inform users that electronic messages transmitted over the internet, regardless of protocol (e-mail, web, ftp, etc.), are vulnerable to network threats leading to unfair activity, dispute of contract, or information disclosure/modification. To protect against such threats, the data controller takes all expected precautions. Systems are monitored to record all security variances and provide evidence in any security incident. System monitoring also enables checking the effectiveness of applied precautions.

Our websites employ Google reCAPTCHA to identify fraudulent activity. Use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

8. YOUR RIGHTS REGARDING DATA PROCESSING

8.1. Right to Information
You may request information in writing via the contact details provided in the introduction regarding:

We will fulfill your request without undue delay, but at the latest within one month of receipt, via letter sent to your provided contact address, or in the case of an electronic request, to your electronic mail address.

8.2. Right to Rectification
You may request in writing via the contact details provided in the introduction that our company modify any of your personal data (for example, you can change your e-mail address or other stored data at any time). Our company will fulfill your request without undue delay, but at the latest within one month of receipt, and notify you via letter sent to the specified address. If our company is unable to fulfill your request, we will send notification of the refusal within the same deadline to your provided address via letter, or in the case of an electronic request, to your electronic mail address.

8.3. Right to Erasure ("Right to be Forgotten")
You may also request in writing the deletion of your stored data via the contact details mentioned in the introduction; however, you must take the following into account:
The use of your data is governed by the contractual relationship with the organization employing you.
If you request erasure of your data, the signatories of the relevant contract will be informed of the data deletion.
An erasure request will be rejected if legislation obligates our company to retain personal data further. An example is data related to invoicing, which we are required to process until the deadline specified by law.
Our company will fulfill your request without undue delay, but at the latest within one month of receipt, and send notification to your provided address via letter. If our company is unable to fulfill your request due to mandatory data processing required by law, we will send notification of refusal within the same deadline to your specified address via letter, or in the case of an electronic request, to your electronic mail address.

8.4. Right to Restriction of Processing
You may request in writing via the specified contact details that our company restrict the processing of your personal data. The restriction lasts as long as the reason indicated by you necessitates data storage.
You may request restriction of data processing, for example, if you believe your request was handled unlawfully by our company, but due to official proceedings initiated by you, it is necessary that your request not be deleted. In this case, our company will continue storing your request—which constitutes personal data—until contacted by the authority, after which data will be deleted. Our company will fulfill your request without undue delay, but at the latest within one month of receipt, and notify you via letter sent to the specified contact address, or in the case of an electronic request, to your electronic mail address.

8.5. Right to Object
You may object in writing via the provided contact details against data processing if your personal data would be transferred or used by our company for direct marketing, public opinion polls, or scientific research. For instance, you may object to our company using your personal data without your consent for sending newsletters. You may also object to data processing if you believe it is solely necessary for compliance with a legal obligation applying to our company or for pursuing its legitimate interests, except for data processing authorized by law. For instance, you cannot object to processing your data defined by law during invoicing.

If you object to our data processing activities, we will examine it without undue delay, but at the latest within one month of receipt, and make a decision on its validity, which we will communicate to you in writing. If you disagree with our decision, you are entitled to turn to court within 30 days of delivery, or if no decision was made within the specified deadline, from its expiration, to request a modification of the decision.

8.6. Right to Data Portability
You are entitled to receive personal data concerning you, which you provided to Datahouse Kft. (as Data Controller), in a structured, commonly used, machine-readable format (e.g. XML, JSON, CSV format), and you have the right to transmit those data to another data controller without hindrance from Datahouse Kft.

The right to data portability applies to you if the legal basis for data processing is your explicit consent [Article 6(1)(a) of the GDPR] or performance of a contract concluded with you [Article 6(1)(b) of the GDPR], and data processing is carried out by automated means.

In exercising your right to data portability, you are entitled to request direct transmission of personal data between data controllers, where technically feasible.

You may submit your request in writing via the contact details provided in the introduction. Datahouse Kft. will fulfill the request without undue delay, but at most within 1 month of receipt, and deliver the data to the specified contact address (in case of an electronic request, via electronic mail, through a secure channel).

9. Legal Remedies Related to Data Processing
If you have submitted a request to us for rectification, restriction of processing, or erasure, or have objected to data processing, but we have not fulfilled your request, you are entitled to turn to court or the authorities.

In court proceedings, you are entitled to initiate proceedings before the regional court (Törvényszék) having jurisdiction over your place of residence, which body shall decide out of turn.

You may also initiate proceedings with the National Authority for Data Protection and Freedom of Information (NAIH) if you experience a data protection violation. Please note that NAIH recommends data subjects contact the data controller first when an issue arises in order to find an amicable solution. In this case, we kindly request that if you have any issues or claims, please submit them to us first, although we naturally cannot require this of you as a mandatory obligation. You can contact NAIH using the following contact details: e-mail: ugyfelszolgalat@naih.hu, headquarters: 1055 Budapest, Falk Miksa utca 9-11., postal address: 1363 Budapest, Pf.: 9., Phone: +36 (1) 391-1400. You can read about the investigation of complaints related to exercising data subject rights at the following link: https://www.naih.hu/panaszuegyintezes-rendje.html.