{"id":3,"date":"2026-06-08T14:51:13","date_gmt":"2026-06-08T14:51:13","guid":{"rendered":"https:\/\/bmwdecker.hu\/?page_id=3"},"modified":"2026-07-14T11:51:45","modified_gmt":"2026-07-14T11:51:45","slug":"adatvedelmi-tajekoztato","status":"publish","type":"page","link":"https:\/\/bmwdecker.hu\/en\/adatvedelmi-tajekoztato\/","title":{"rendered":"Privacy Information Notice"},"content":{"rendered":"
\n \n \n\t\n\n\n\n
\n

DECKER AUT\u00d3 Ltd.<\/strong><\/p>

Privacy Information Notice<\/h1>

For the website and to get in touch online<\/p>

1. Details of the data controller<\/h2>

The purpose of this notice is to provide visitors to the Decker Aut\u00f3 Kft. website, enquiries and customers using the contact form with clear and accessible information regarding the processing of their personal data.<\/p>

Name of the data controller<\/strong><\/p><\/td>

Decker Aut\u00f3 Ltd.<\/p><\/td><\/tr>

Registered office<\/strong><\/p><\/td>

43 K\u00e1roly Kir\u00e1ly Street, 2040 Buda\u00f6rs.<\/p><\/td><\/tr>

Site \/ workshop<\/strong><\/p><\/td>

7 H\u00e1ros Street, Budapest 1222.<\/p><\/td><\/tr>

Tax number<\/strong><\/p><\/td>

29216747-2-13<\/p><\/td><\/tr>

Company registration number<\/strong><\/p><\/td>

13-09-212537<\/p><\/td><\/tr>

Contact email address<\/strong><\/p><\/td>

munka@deckerauto.hu; decker.adam@deckerauto.hu<\/p><\/td><\/tr>

Telephone<\/strong><\/p><\/td>

Telephone number: +36 70 420 0066<\/p>

0-24 Reception: +36 70 671 5098;<\/p>

Workshop Manager: +36 30 293 6054<\/p><\/td><\/tr>

Domain<\/strong><\/p><\/td>

bmwdecker.hu<\/p><\/td><\/tr><\/tbody><\/table>

2. Scope of the prospectus<\/h2>

This privacy notice applies when you visit the website, use the contact form, by contacting us via email or telephone, by requesting a quote, by arranging servicing or claims settlement, and to data processing in connection with the analytics and marketing tools used on the website.<\/p>

The purpose of the website is to showcase the servicing, diagnostic, bodywork repair, paintwork and claims settlement services available for BMW vehicles, and to help interested parties and customers get in touch.<\/p>

Decker Aut\u00f3 Kft. does not request any special categories of personal data. Should a customer provide personal data that is not required in the vehicle registration certificate, fault description or other attachments, the data controller will process such data only to the extent necessary for the handling of the matter and may delete it if it is no longer required.<\/p>

3. The fundamental principles of data processing<\/h2>
  • Lawfulness, fairness and transparency: data processing is always carried out on a specific legal basis.<\/li>
  • Purpose limitation: we use the data solely for the purposes set out in this notice.<\/li>
  • Data minimisation: we only collect data that is necessary for the specific purpose.<\/li>
  • Accuracy: we strive to ensure that the data is accurate and up to date.<\/li>
  • Limited retention period: we only retain data for as long as is necessary.<\/li>
  • Integrity and confidentiality: we implement technical and organisational measures to protect data.<\/li><\/ul>

    4. Detailed data processing operations<\/h2>

    4.1 Website visits and technical operation<\/h3>

    Objective: to ensure the website operates securely, reliably and in a user-friendly manner; to carry out troubleshooting; and to prevent misuse.<\/p>

    Data processed: IP address, technical details of the browser and device, time of visit, pages viewed, system and server logs.<\/p>

    Legal basis: Legitimate interest pursuant to Article 6(1)(f) of the GDPR: the operation of the website, its IT security and the prevention of misuse.<\/p>

    Retention period: We typically retain technical log data for a short period, up to 30\u201390 days, unless a security incident or legal dispute warrants a longer retention period.<\/p>

    Potential recipients \/ data processors: Hosting provider, web developer\/maintainer, IT service provider.<\/p>

    4.2 Contact form and request for a quote<\/h3>

    Objective: to identify enquiries, respond to them, carry out a preliminary assessment of service requirements or fault reports, and assist with providing quotations and arranging appointments.<\/p>

    Data processed: name, telephone number, email address, vehicle identification number, registration number, fault or fault code identified, mileage, upload of vehicle registration certificate, textual description of the problem, confirmation of acceptance of the privacy policy and the date and time thereof.<\/p>

    Legal basis: Article 6(1)(b) of the GDPR: steps taken prior to entering into a contract and the preparation of a service offer; where necessary, Article 6(1)(f) of the GDPR: legitimate interest in documenting administrative procedures and handling any potential legal claims.<\/p>

    Retention period: In the event of an unsuccessful or closed enquiry, for a maximum of 12 months from the date of the last substantive contact. Where a service relationship has been established, service and invoicing documents may be retained for a longer period in accordance with statutory obligations.<\/p>

    Potential recipients \/ data processors: Website operator, email service provider, and, at a later stage, a CRM\/spreadsheet system, as well as staff responsible for service administration.<\/p>

    4.3 Dealing with enquiries by email and telephone<\/h3>

    Objective: handling enquiries, coordinating service and claims settlement matters, and maintaining customer relations.<\/p>

    Data processed: name, telephone number, email address, content of messages, information relating to the car and repairs, date and time of contact.<\/p>

    Legal basis: Article 6(1)(b) of the GDPR: the preparation or performance of a contract; Article 6(1)(f) of the GDPR: legitimate interest in documenting client communications.<\/p>

    Retention period: Up to 12 months from the date the case is closed, or, in the case of a contractual or invoicing relationship, until the end of the retention period prescribed by law.<\/p>

    Potential recipients \/ data processors: email service provider, telephone service provider, internal staff.<\/p>

    4.4 Servicing, repairs and the digital service booklet<\/h3>

    Objective: to carry out professional vehicle servicing, document the repair process, maintain work sheets, record the service history and keep customers informed.<\/p>

    Data processed: customer\u2019s name and contact details, vehicle identification details, chassis number, registration number, mileage, fault description, work carried out, parts used, repair documents, and, where applicable, data required for the digital service history.<\/p>

    Legal basis: Article 6(1)(b) of the GDPR: performance of a contract; Article 6(1)(c) of the GDPR: compliance with a legal obligation; Article 6(1)(f) of the GDPR: legitimate interest in documenting quality and warranty-related procedures.<\/p>

    Retention period: We retain service documentation and work sheets in accordance with the service agreement, the warranty period, the time limits for asserting legal claims, and accounting retention requirements.<\/p>

    Potential recipients \/ data processors: Service administrators, parts suppliers, BMW-related service networks, the provider of the worksheet\/CRM system, and the accountant.<\/p>

    4.5 Claims settlement and insurance administration<\/h3>

    Objective: to handle insurance repairs, damage assessment, claims settlement, repair documentation, parts replacement, bodywork repairs and paintwork.<\/p>

    Data processed: name, contact details, vehicle details, description of the damage, insurance policy numbers, claim reference number, photographs, repair and insurance documents, and vehicle registration certificate details.<\/p>

    Legal basis: Article 6(1)(b) of the GDPR: performance of a contract for the provision of services; Article 6(1)(c) of the GDPR: compliance with a legal obligation; Article 6(1)(f) of the GDPR: legitimate interests in the establishment, exercise or defence of legal claims.<\/p>

    Retention period: Following the closure of the case, taking into account the statutory, insurance and legal time limits for asserting claims.<\/p>

    Potential recipients \/ data processors: Insurance companies, loss adjusters, parts suppliers, accountants, legal representatives, CRM\/spreadsheet systems.<\/p>

    4.6 Invoicing and bookkeeping<\/h3>

    Purpose: to issue invoices and to fulfil accounting and tax obligations.<\/p>

    Data processed: name\/company name, billing address, tax number, service details, payment details, invoice details.<\/p>

    Legal basis: Article 6(1)(c) of the GDPR: compliance with a legal obligation.<\/p>

    Retention period: We retain accounting and tax documents for the retention period stipulated by law, typically for 8 years.<\/p>

    Potential recipients \/ data processors: Accountant, invoicing software provider, National Tax and Customs Administration (NAV), banking provider.<\/p>

    4.7 Newsletter subscriptions and marketing communications<\/h3>

    Purpose: to send newsletters, special offers, professional content or service-related information, provided that this feature is active on the website.<\/p>

    Data processed: name, email address, date of subscription, and technical data required to verify consent.<\/p>

    Legal basis: Article 6(1)(a) of the GDPR: the data subject\u2019s voluntary consent. Consent may be withdrawn at any time.<\/p>

    Retention period: Until consent is withdrawn, you unsubscribe, or the newsletter service is discontinued.<\/p>

    Potential recipients \/ data processors: Newsletter service provider, email service provider.<\/p>

    4.8 Web analytics, measurement and advertising systems<\/h3>

    Purpose: to measure website traffic, analyse popular pages, measure the effectiveness of advertising campaigns, and track remarketing and conversions, where these features are enabled.<\/p>

    Data processed: cookie identifiers, IP address details or an anonymised version thereof, device and browser data, visit data, conversion events, demographic and interest data, where permitted by the system and the legal framework.<\/p>

    Legal basis: Consent under Article 6(1)(a) of the GDPR is not strictly necessary for analytical and marketing cookies. Consent may be withdrawn or amended at any time via the cookie settings.<\/p>

    Retention period: As specified by the relevant service provider\u2019s cookie lifetime and data retention settings; this must be finalised in the list of cookies used on the website.<\/p>

    Potential recipients \/ data processors: Google Analytics, Google Tag Manager, Google Search Console, Google Ads, Meta Pixel \/ Meta Business tools, as well as other analytics and advertising service providers actually used at the time of activation.<\/p>

    4.9 Embedded content and social media<\/h3>

    Objective: To display YouTube videos, social media links, Trustindex or other review widgets on the website.<\/p>

    Data processed: embedded services may process technical data, cookies or other identifiers from the user\u2019s device; the exact nature of the data processing depends on the information provided by the relevant service provider.<\/p>

    Legal basis: Consent, provided that the embedded element is not necessary for the website to function and places a cookie or similar identifier; otherwise, legitimate interest in displaying the website\u2019s content.<\/p>

    Retention period: For the period specified in the relevant third-party provider\u2019s information notice and in the website\u2019s cookie list.<\/p>

    Potential recipients \/ data processors: YouTube\/Google, Meta, TikTok, Trustindex or any other external service provider that is actually integrated.<\/p>

    5. Cookies and similar technologies<\/h2>

    This website may use cookies or similar technologies. A cookie is a small data file that the website places on a visitor\u2019s device to support its operation, measurement or marketing purposes.<\/p>

    Strictly necessary cookies are required for the website to function; no separate consent is required for these. Cookies relating to analytics, marketing, remarketing or third-party embedded content may only be used on the basis of appropriate information and consent.<\/p>

    The cookie banner must ensure that visitors can choose whether to accept or reject non-essential cookies, and that they can change their mind at a later date. The final list of cookies must be compiled on the basis of the actual cookies used on the live website.<\/p>

    Recommended cookie categories<\/h2>
    • Strictly necessary cookies: session cookies, security cookies, cookies required for form functionality, and cookies used to store consent.<\/li>
    • Analytical cookies: Google Analytics or a similar analytics system, used only with your consent.<\/li>
    • Marketing cookies: Google Ads, Meta Pixel or remarketing, used solely on the basis of consent.<\/li>
    • Cookies used by embedded content: YouTube, social media, review widgets; consent may be required to enable them.<\/li><\/ul>

      6. Data processors and recipients<\/h2>

      Decker Aut\u00f3 Kft. may engage external service providers to process personal data. The final list of data processors must be finalised prior to go-live, including contractual details, company name, registered office and scope of responsibilities.<\/p>

      • Hosting provider \/ system administrator: website operation, logging, security.<\/li>
      • Web developer \/ maintenance specialist: website development, technical support.<\/li>
      • Email service provider: handling correspondence via email, forwarding form notifications.<\/li>
      • CRM \/ work order system: management of service cases, work orders and customer processes.<\/li>
      • Accounting and invoicing software: invoicing, accounting obligations.<\/li>
      • Google services: analytics, measurement, Search Console, advertising, Maps, YouTube embedding.<\/li>
      • Meta services: Facebook\/Instagram integration, Meta Pixel, ad measurement.<\/li>
      • Insurance companies and loss adjusters: claims handling.<\/li>
      • Parts suppliers and technical partners: supporting the repair process.<\/li><\/ul>

        7. Data transfers to third countries<\/h2>

        Where the website uses Google, Meta, YouTube, TikTok or other external digital service providers, data may be transferred outside the European Economic Area. In such cases, the basis for data transfer may be an adequacy decision by the European Commission, standard contractual clauses or other safeguards under the GDPR. The actual service providers and data transfer safeguards must be finalised on the basis of the tools used at the time of go-live.<\/p>

        8. The rights of data subjects<\/h2>

        Under the GDPR, data subjects may exercise the following rights. Requests may be submitted using the data controller\u2019s contact details. The data controller will respond without undue delay and, as a general rule, within one month at the latest.<\/p>

        • Right of access: <\/strong>You may request information as to whether we process your personal data and, if so, what data we process, for what purpose and on what legal basis.<\/li>
        • Right to rectification: <\/strong>You may request that inaccurate or incomplete personal data be corrected or supplemented.<\/li>
        • Right to erasure: <\/strong>You may request the erasure of your personal data if the purpose of the data processing no longer applies, you have withdrawn your consent, or the data processing is unlawful for any other reason.<\/li>
        • Right to restriction of processing: <\/strong>You may request that the processing of your data be restricted, for example, where the accuracy of the data is disputed or where you wish to assert a legal claim.<\/li>
        • Right to data portability: <\/strong>In the case of data processed automatically on the basis of consent or a contract, you may request that the data be provided to you in a machine-readable format.<\/li>
        • The right to protest: <\/strong>Where data processing is based on a legitimate interest, you may object to the processing of your personal data.<\/li>
        • Withdrawal of consent: <\/strong>Where data processing is based on consent, you may withdraw your consent at any time; however, this does not affect the lawfulness of the data processing carried out prior to the withdrawal.<\/li>
        • Right to lodge a complaint: <\/strong>You may lodge a complaint with the National Authority for Data Protection and Freedom of Information.<\/li><\/ul>

          9. Data security<\/h2>
          • When operating the website, it is recommended that an SSL certificate be used and that a secure data connection be established.<\/li>
          • Access to administrative interfaces must be protected by individual user accounts and strong passwords; where available, multi-factor authentication is recommended.<\/li>
          • Only those who need access to the website and customer data for the purposes of their work may access them.<\/li>
          • Appropriate contractual and technical safeguards must be put in place with data processors.<\/li>
          • Regular backups, updates, spam protection, CAPTCHA and a basic firewall are recommended.<\/li><\/ul>

            10. Legal remedies and contact details for the relevant authorities<\/h2>

            Data subjects may in the first instance contact Decker Aut\u00f3 Kft. with any questions or requests relating to data processing.<\/p>

            National Authority for Data Protection and Freedom of Information (NAIH)
            Address: 9\u201311 Falk Miksa Street, 1055 Budapest.
            Postal address: 1363 Budapest, PO Box 9.
            Email: ugyfelszolgalat@naih.hu
            Telephone: +36 (1) 391 1400
            Website: www.naih.hu<\/p>

            You may also lodge a complaint with the relevant court if you consider that the processing of your personal data is unlawful.<\/p>

            11. Information to be clarified before activation<\/h2>
            • A detailed list of the final domain and any redirected domains.<\/li>
            • The exact company details of the hosting provider, web developer, maintenance provider, email provider and CRM\/spreadsheet system.<\/li>
            • The name, provider, purpose, duration and type of the cookies actually used.<\/li>
            • The actual use of the newsletter function and its provider.<\/li>
            • The actual settings for Google Analytics, Google Tag Manager, Google Search Console, Google Ads, Meta Pixel, YouTube, TikTok, Trustindex and other embeds.<\/li>
            • The precise necessity of uploading the vehicle registration certificate and the solution for data minimisation.<\/li>
            • The final retention period for data relating to complaint handling, service documentation, claims settlement and invoicing.<\/li><\/ul>

              12. Short introductory text for the website<\/h2>

              Decker Aut\u00f3 Kft. processes personal data in connection with the use of this website, the completion of the contact form, enquiries made by email or telephone, and the handling of servicing and claims. We use this data solely for specific purposes, to the extent necessary, and in accordance with the applicable data protection regulations. The detailed information notice sets out the purpose, legal basis and duration of data processing, as well as the rights of data subjects and the available remedies.<\/p>

              13. Legislative and professional sources used<\/h2>
              • Regulation (EU) 2016\/679 of the European Parliament and of the Council, in particular Articles 6, 12\u201314 and 15\u201322.<\/li>
              • National Authority for Data Protection and Freedom of Information: data processing notices, cookie policy, data protection glossary, customer service contact details.<\/li><\/ul>\n<\/div><\/div>\n<\/section><\/main>","protected":false},"excerpt":{"rendered":"

                DECKER AUT\u00d3 KFT.Adatv\u00e9delmi t\u00e1j\u00e9koztat\u00f3Weboldalhoz \u00e9s online kapcsolatfelv\u00e9telhez1. Az adatkezel\u0151 adataiJelen t\u00e1j\u00e9koztat\u00f3 c\u00e9lja, hogy a Decker Aut\u00f3 Kft. weboldal\u00e1nak l\u00e1togat\u00f3i, \u00e9rdekl\u0151d\u0151i \u00e9s kapcsolatfelv\u00e9teli \u0171rlapot haszn\u00e1l\u00f3 \u00fcgyfelei k\u00f6z\u00e9rthet\u0151 t\u00e1j\u00e9koztat\u00e1st kapjanak a szem\u00e9lyes adataik kezel\u00e9s\u00e9r\u0151l.Adatkezel\u0151 neveDecker Aut\u00f3 Kft.Sz\u00e9khely2040 Buda\u00f6rs, K\u00e1roly Kir\u00e1ly utca 43.Telephely \/ m\u0171hely1222 Budapest, H\u00e1ros utca 7.Ad\u00f3sz\u00e1m29216747-2-13C\u00e9gjegyz\u00e9ksz\u00e1m13-09-212537Kapcsolattart\u00e1si e-mailmunka@deckerauto.hu; decker.adam@deckerauto.huTelefonTelefonsz\u00e1m: +36 70 420 00660-24 Portaszolg\u00e1lat: +36 70 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_breakdance_hide_in_design_set":false,"_breakdance_tags":"","footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/bmwdecker.hu\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bmwdecker.hu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bmwdecker.hu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bmwdecker.hu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bmwdecker.hu\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":3,"href":"https:\/\/bmwdecker.hu\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":406,"href":"https:\/\/bmwdecker.hu\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/406"}],"wp:attachment":[{"href":"https:\/\/bmwdecker.hu\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}