Privacy Notice
This notice explains how Alpha Gáz Kft. processes personal data provided through the website, webshop, contact requests, orders, payment, delivery, service work and CRM administration.
1. Controller details
The controller is the company that determines the purposes and means of processing personal data.
Privacy requests, objections, rectification requests or erasure requests may be submitted via the e-mail address above.
2. Scope and principles
This notice applies to the use of the www.alphagaz.hu website and webshop, contact and quotation requests, orders, payment, delivery, and the service and CRM administration of Alpha Gáz Kft.
Alpha Gáz Kft. processes personal data for specified purposes, transparently, limited to what is necessary, and with appropriate technical and organisational safeguards. The company does not request special category data; please provide health, financial or other sensitive data in message fields only where strictly necessary for the specific matter.
This notice does not replace the own privacy notices of payment providers, courier services, Google, social platforms or other external services. Those service providers may also act as independent controllers in their own operations.
3. Main processing activities
The table below summarises the main processing activities related to the website and related administration.
| Purpose | Data processed | Legal basis | Retention period |
|---|---|---|---|
| Website operation, security and troubleshooting | IP address, browser and device data, visit time, log data, technical cookie identifiers. | Article 6(1)(f) GDPR: legitimate interest in operating the website securely and properly; strictly necessary cookies are used where technically required for the requested service. | Server and security logs are generally retained for 30-90 days; in case of a security incident or dispute, for the necessary period. |
| Contact request, quotation request, callback | Name, e-mail address, phone number, message, address or city, appliance and fault details, time of request. | Article 6(1)(b) GDPR: steps prior to entering into a contract; Article 6(1)(f) GDPR: customer service documentation and legal claims. | 1 year after the request is closed; in contractual or disputed matters, until the end of the civil limitation period. |
| Webshop account, order and fulfilment | Name, e-mail address, phone number, billing and delivery address, company data, tax number, ordered products, payment and delivery method, order notes. | Article 6(1)(b) GDPR: performance of a contract; Article 6(1)(c) GDPR: invoicing and accounting obligations. | Account data until erasure request or account termination; order and contract data generally for 5 years; accounting records for 8 years. |
| Online payment through SimplePay | Order ID, payable amount, payment status, transaction identifiers; Alpha Gáz Kft. does not store bank card data. | Article 6(1)(b) GDPR: payment performance; Article 6(1)(c) GDPR: financial and accounting obligations. | According to the retention periods connected to the order and invoicing; the payment provider applies its own retention rules. |
| Delivery, parcel point and pickup | Name, delivery address or pickup point, phone number, e-mail address, parcel data, cash-on-delivery/payment information. | Article 6(1)(b) GDPR: order fulfilment; Article 6(1)(f) GDPR: handling delivery complaints. | For the period required for order fulfilment and legal claims; in the carrier system according to the carrier privacy notice. |
| Service work, worksheet, warranty and CRM administration | Name, address, phone number, e-mail address, appliance type, serial number, fault and repair description, parts, appointment, worksheet, case status, signature or photo where required for the matter. | Article 6(1)(b) GDPR: performance of a service contract; Article 6(1)(c) GDPR: warranty, accounting and consumer protection obligations; Article 6(1)(f) GDPR: legal claims. | For the period required by service, warranty and accounting obligations; accounting records for 8 years; in case of a dispute, until the procedure is closed. |
| Newsletter or marketing contact, where separate subscription is given | Name, e-mail address, subscription time and source, proof of consent, unsubscribe status. | Article 6(1)(a) GDPR: voluntary consent. | Until consent is withdrawn or unsubscribe occurs; minimal data required to prove unsubscribe may be retained. |
| Analytics, measurement, advertising and embedded external services | Cookie identifiers, IP address, device and browser data, page view events, technical data when reCAPTCHA or Google Maps is used. | For non-essential analytics and marketing: Article 6(1)(a) GDPR, consent; for security spam protection: Article 6(1)(f) GDPR, legitimate interest. | Until consent is withdrawn, until the cookie expires, or according to the relevant provider privacy notice. |
Failure to provide data
Without the data necessary for contact, quotation, order, invoicing, delivery or service work, the relevant matter cannot be handled, or can only be handled in a limited way. Marketing consent is not mandatory.
Automated decision-making
Alpha Gáz Kft. does not use automated decision-making or profiling that would produce legal effects concerning the data subject or similarly significantly affect them. Webshop search, filtering and recommendation functions do not qualify as such decision-making.
4. Processors and recipients
Personal data is disclosed only where required for fulfilling the matter, complying with legal obligations, secure operation or legal claims.
| Category | Recipient or processor |
|---|---|
| Hosting and infrastructure | Rackforest Kft. and server, backup, maintenance, security and system administration providers used for website operation. |
| Webshop and website operation | WordPress, WooCommerce and related plugins used for cart, checkout, account, search, forms, security and logging functions. |
| Payment | OTP Mobil Kft. / SimplePay for processing bank card payments. Alpha Gáz Kft. does not process or store bank card data. |
| Delivery | GLS home delivery, GLS parcel point, personal pickup administration, and the courier, parcel point or logistics partner actually selected for the order. |
| Invoicing and accounting | Invoicing software, accountant, tax and legal service providers for complying with invoicing, accounting and statutory obligations. |
| CRM, service and technicians | Employees, service technicians, subcontractors involved in the relevant matter, and the CRM system to the necessary extent. |
| External web services | Google reCAPTCHA, Google Maps, WooCommerce Analytics/Jetpack type measurement services and other embedded or security services where active on the given page and where the appropriate legal basis is available. |
| Authorities | Competent authorities, courts and legal representatives where required by law, authority request or legal claims. |
International transfers may primarily occur when external technology providers are used. In such cases, the provider privacy notice and the applicable legal safeguards apply.
5. Cookies and external measurement codes
The website uses cookies for operation, cart and checkout processes, security, and - with consent - measurement or marketing purposes. Cookies can be deleted or blocked in the browser, but blocking them may limit webshop functionality.
| Type | Example | Processing purpose |
|---|---|---|
| Strictly necessary cookies | Cart, checkout, login, session, security, cookie consent record. | Required for website and webshop operation; without them several functions do not work. |
| Convenience and performance cookies | Settings, display states, embedded map, website usage measurement. | Used only with consent or another appropriate legal basis; the choice can be changed in the cookie management interface. |
| Analytics and marketing cookies | Traffic measurement, campaign measurement, WooCommerce/Jetpack type statistical identifiers, external platform identifiers. | Subject to consent; consent can be changed in the browser or cookie management interface. |
Forms on the website may use reCAPTCHA or another security solution to prevent spam and abuse. Embedded maps, videos, social or analytics services may also process technical data.
6. Data subject rights
Under the GDPR, the data subject may exercise the following rights:
- request information and access to the personal data processed about them;
- request rectification of inaccurate data or completion of incomplete data;
- request erasure of personal data where there is no further legal basis for processing;
- request restriction of processing;
- object to processing based on legitimate interests;
- withdraw consent at any time where processing is based on consent;
- request data portability for automated processing based on contract or consent.
Requests are answered without undue delay and within 1 month at the latest. Where necessary due to the complexity or number of requests, this period may be extended by a further 2 months.
7. Remedies
If you believe that processing is unlawful, you should first contact Alpha Gáz Kft. at info@alphagaz.hu so the complaint can be investigated directly.
Supervisory authority
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Phone: +36 1 391 1400
E-mail: ugyfelszolgalat@naih.hu
Web: www.naih.hu
The data subject may also turn to court. The lawsuit may also be initiated before the court competent for the data subject residence or habitual residence.
8. Data security and review
Alpha Gáz Kft. protects personal data with access controls, logging, regular updates, backups and necessary organisational measures. Access is granted only to employees, technicians and processors who need it for handling the relevant matter.
This notice is updated when services, processors, legislation or technical operation change. The current version is available on this page.