Privacy Notice
Privacy notice prepared based on net.jogtar.hu/jogszabaly?docid=a1600679.eup, as well as the GDPR (EU 2016/679) and the Hungarian Info Act (Act CXII of 2011):
1. Data controller identification
Name: Keszi Plusz Kft.
Registered office: 1106 Budapest, Tárna utca 1-3.
Company registration number: 01-09-405598
Tax number: 32078763-2-42
E-mail: info@energonx.hu
Phone: +36 20-497-8987
2. Purpose of this notice
The purpose of this notice is to provide users – pursuant to Regulation (EU) 2016/679 (GDPR) – with transparent information about the personal data we process, the purposes and legal bases of processing, the method and retention period, the rights of data subjects, and how those rights can be exercised.
3. Definitions and principles
Data subject: an identified or identifiable natural person.
Personal data: any information relating to a data subject.
Data controller: the entity that determines the purposes and means of processing.
Data processor: the entity that processes personal data on behalf of the controller.
Principles: lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; accountability.
4. Categories and sources of data processed
During registration or purchase: name, e-mail address, phone number, address, IP address, billing details
Newsletter subscription: e-mail address, IP address, subscription date
Website visit: IP address, cookies, Google Analytics
Customer service / contact: name, e-mail address, message content
5. Purpose, legal basis and retention period
| Purpose | Data processed | Legal basis | Retention |
|---|---|---|---|
| Order fulfilment | name, address, phone number, e-mail address | Performance of a contract | as required by law (for invoices: at least 8 years) |
| Sending newsletters | e-mail address | Consent | until withdrawal |
| Ensuring website operation, analytics | IP address, cookies | essential cookies: legitimate interest; analytics/marketing cookies: consent | max. 26 months |
| Customer service | name, e-mail, message content | legitimate interest, performance of a contract | max. 1 year from case closure |
6. Data processors
The following processors handle personal data on behalf of Keszi Plusz Kft.:
Web hosting provider (tarhely.eu)
E-commerce platform provider (Sellvio)
Accountant
Courier services
Payment providers (PayPal, banks)
7. Location of processing
Processing takes place at the controller’s registered office (1106 Budapest, Tárna utca 1-3.) and on the infrastructure provided by processors (e.g., tarhely.eu servers).
8. Transfers outside the EU/EEA
When operating the online store, some service providers (e.g., payment or analytics providers) may use infrastructure located outside the European Economic Area (EEA) or may access data from outside the EEA. In such cases, transfers are carried out using appropriate safeguards under GDPR Chapter V (e.g., an adequacy decision or Standard Contractual Clauses/SCCs plus additional technical and organisational measures).
9. Data security
The controller applies the following technical and organisational measures:
SSL (HTTPS protocol)
Regular backups
Strong passwords, two-factor authentication
Physical and electronic access restrictions
Regularly updated firewall and antivirus protection
Confidentiality and data protection obligations for employees and partners
10. Processing of minors’ data
Our services may not be used by persons under 16 years of age and we do not process their personal data. If we become aware that we have recorded personal data relating to a person under 16, we will delete it without delay.
11. Data subject rights
Every data subject has the right to:
request information about the processing of their personal data;
request access to their personal data;
request rectification of inaccurate data;
request erasure (“right to be forgotten”) where there is no further legal basis for processing;
request restriction of processing;
request data portability: receive their personal data in a structured, commonly used, machine-readable format and/or request transmission to another controller;
object to processing, especially for marketing purposes.
Users can update their data in their profile at any time, or request erasure via info@energonx.hu as well.
The controller does not use automated decision-making or profiling.
12. Withdrawal of consent
Consent can be withdrawn at any time (for example, by clicking the unsubscribe link at the bottom of newsletters).
13. Personal data breach management
In the event of a personal data breach, the controller will notify the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) within 72 hours and will also inform affected data subjects if the breach is likely to result in a high risk to their rights and freedoms.
14. Complaints
If you have any questions or complaints regarding data processing, please contact us at info@energonx.hu. You may also contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) (naih.hu) directly:
Address: 1055 Budapest, Falk Miksa utca 9-11.
Phone: +36-1-391-1400
E-mail: ugyfelszolgalat@naih.hu
15. Updates to this notice
Last updated: 15 February 2026.