Privacy Policy

Effective from: July 24, 2026

This Privacy Policy (hereinafter: Policy) applies to the processing of personal data by XLW Parts Kft (registered seat: 6763 Szatymaz, IV. Korzet 142., Hungary, company registration number: 06 90 030929, tax number: HU32951091, e-mail: info@xlw.hu, phone: +36 30 / 702-1151), as data controller (hereinafter: Data Controller), operating the website www.xlw.hu (hereinafter: Website), in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Hungarian data protection law.

1. DATA CONTROLLER DETAILS

Company name: XLW Parts Kft

Registered seat: 6763 Szatymaz, IV. Korzet 142., Hungary

Company registration number: 06 90 030929

Tax number: HU32951091

E-mail: info@xlw.hu

Phone: +36 30 / 702-1151

2. SCOPE AND PURPOSE OF DATA PROCESSING

2.1. Data processed during ordering / contact: name, delivery and billing address, e-mail address, phone number, and details of ordered products/services.

2.2. Purpose of processing: fulfilling the order, preparing a personalized quote, communicating with the User, invoicing, and - subject to separate consent - marketing communication.

2.3. Legal basis of processing: performance of a contract (GDPR Article 6(1)(b)), compliance with a legal obligation (for invoicing, GDPR Article 6(1)(c)), and, for marketing communication, the User's freely given consent (GDPR Article 6(1)(a)).

2.4. Consent to marketing communication is always given through a separate, optional statement, and its absence does not prevent placing an order or contact request.

3. DURATION OF DATA PROCESSING

3.1. The Data Controller processes personal data for the retention period required by accounting and tax law (generally 8 years) from the performance of the contract. Where processing is based on marketing consent, data is processed until the consent is withdrawn.

4. RIGHTS OF DATA SUBJECTS

4.1. Under the GDPR, the User has the right to information, access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object.

4.2. The User may withdraw marketing consent at any time; this does not affect the lawfulness of processing before the withdrawal.

4.3. The User may exercise these rights via the contact details provided in this Policy.

4.4. The User has the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, address: 1055 Budapest, Falk Miksa utca 9-11., Hungary), or to seek judicial remedy.

5. DATA SECURITY

5.1. The Data Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, transmission, disclosure, deletion, destruction, and accidental loss or damage.

6. DATA PROCESSORS AND THIRD-PARTY SERVICES

6.1. The Data Controller uses Webnode AG for website hosting.

6.2. Where the Website embeds Google Maps, Google LLC may access certain technical data in accordance with its own privacy policy.

7. COOKIES

7.1. The Website uses cookies necessary for its operation and, subject to consent, statistical/marketing cookies. Details and cookie preference settings are available in the cookie notice displayed on the Website.

8. FINAL PROVISIONS

8.1. The Data Controller reserves the right to unilaterally amend this Policy; amendments take effect upon publication on the Website.