Privacy Policy
This privacy notice informs you about the data we process when you use ecopass.
1. Controller
Enternova Kft., Szent István utca 48., H-2161 Csomád, Hungary; VAT ID: HU24892955; contact: see Contact.
2. Data processed, purposes, legal bases, retention period
| Data | Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| Registration number, country of registration, vehicle details, date of first registration, vehicle identification number | Application to the issuing body | Art. 6(1)(b) | 5 years |
| Photo or scan of the vehicle registration certificate | Proof to the issuing body | Art. 6(1)(b) | up to 30 days after issue |
| Name, delivery address, email, telephone (optional) | Delivery, communication | Art. 6(1)(b) | 5 years; 8 years as an accounting record |
| Confirmed mandatory fields with timestamp | Proof of contract conclusion | Art. 6(1)(f) | 5 years |
| Email for the notification (“Notify me”) | one-off message as soon as ordering is possible | Art. 6(1)(a) (consent) | until withdrawal, at most 2 years |
| Website usage (see section 3) | Improvement of the order form | Art. 6(1)(f) | 90 days |
| Encrypted hash of the IP address | Protection against misuse | Art. 6(1)(f) | 24 hours |
Providing the order data is necessary to conclude the contract.
3. Measurement of website usage
We measure on the server side how the website and the order form are used: steps visited, fields clicked and completed, error messages displayed, time spent, referral source (e.g. search engine), device type, language and the country derived from the IP address. The values entered themselves (e.g. registration number or email) are not recorded. Nothing is stored on your device for this purpose. Bots and our own staff are not recorded.
4. Recipients
| Recipient | Activity | Location | Safeguard |
|---|---|---|---|
| Tárhely.Eu Szolgáltató Kft. | Hosting | Hungary | Contract under Art. 28 GDPR |
| Cloudflare, Inc. | Delivery and protection of the website | USA | EU-US Data Privacy Framework |
| Payment service provider (e.g. Stripe) | Payment processing | Ireland / USA | EU-US Data Privacy Framework |
| Issuing body in Germany or competent French authority | Issue of the sticker | Germany / France | independent controller |
| Postal service provider | Delivery | EU | independent controller |
5. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interests (Art. 15–21 GDPR). You may withdraw your consent at any time, e.g. via the unsubscribe link in every email. We respond to requests within one month.
6. Right to lodge a complaint
You may lodge a complaint with the supervisory authority of your place of residence or with the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9–11, H-1055 Budapest, www.naih.hu.
7. Security
Data is transmitted in encrypted form (TLS). Order data is stored encrypted; only authorised staff with two-factor authentication have access. No automated decision-making takes place.
Effective from 13.10.2026