Categories
Your Cart

Privacy Policy

Dear Visitor and Customer!

LusteeNet Outdoor Adventure Kft. (operator of the JP Parts webshop – https://jpparts.eu) is committed to protecting your personal data and respecting your privacy rights.

This Privacy Policy informs you in a clear, transparent and detailed manner about how we collect, process, store and safeguard your personal data in compliance with EU Regulation 2016/679 (GDPR) and applicable Hungarian laws.

1. Data Controller Information

  • Company Name: LusteeNet Outdoor Adventure Kft.
  • Registered Office & Postal Address: 1111 Budapest, Irinyi J. u. 47., Hungary
  • Company Registration No.: 01-09-699145 (Court of Registration, Budapest)
  • Tax Number: HU12699504

Under Article 37 of the GDPR, the Data Controller is not required to appoint a dedicated Data Protection Officer (DPO), as core activities do not involve large-scale regular and systematic monitoring or processing of special categories of personal data.

2. Governing Legislation & Core Principles

We process personal data strictly in accordance with European and Hungarian legal standards:

  • GDPR: Regulation (EU) 2016/679 on the protection of natural persons with regard to personal data processing;
  • Info Act: Act CXII of 2011 on Informational Self-Determination and Freedom of Information;
  • Civil Code: Act V of 2013 on the Hungarian Civil Code;
  • E-Commerce Act: Act CVIII of 2001 on Electronic Commercial Services;
  • Accounting Act: Act C of 2000 on Accounting (8-year invoice retention).

3. Data Processing Activities

3.1. Account Registration and Login Options (Standard & Google Sign-In)

Our webshop provides two registration and login options for user convenience:

A) Standard Registration & Login (Email & Password)

The user enters their details directly into our form. Passwords are saved via one-way cryptographic hashing and are inaccessible to shop staff. Legal basis: GDPR Art. 6(1)(b).

B) Quick Registration & Login via Google (Google Sign-In / OAuth 2.0)

Users may register or log in using their existing Google account via OAuth 2.0 protocol operated by Google Ireland Limited (Dublin, Ireland). Following explicit user confirmation, Google passes only basic profile details (first name, family name, email, account token) to JP Parts.

Password security: JP Parts never accesses, receives, or stores your Google account password. Independent authentication is handled entirely by Google as an independent data controller (Google Privacy Policy).

Legal basis: GDPR Art. 6(1)(b) and Art. 6(1)(a). Supported by EU–U.S. Data Privacy Framework (DPF).

3.2. Order Processing & Purchase Contracts

Data: Customer contact details, delivery address, ordered automotive parts, totals. Purpose: Order fulfilment, logistics coordination, invoicing. Legal basis: GDPR Art. 6(1)(b). Retention: 5-year statutory civil limitation period.

3.3. Invoicing and Accounting Compliance

Data: Billing name, address, tax ID, transaction details. Purpose: Issuance and archiving of official invoices. Legal basis: GDPR Art. 6(1)(c) (statutory obligation under the Hungarian Accounting Act). Retention: 8 years.

3.4. Shipping and Courier Logistics

Data: Recipient name, address, phone number, tracking email, parcel details. Processors: FedEx / TNT Express, DHL Express. Legal basis: GDPR Art. 6(1)(b). Retention: Until delivery completion and carrier settlement.

3.5. Vehicle Identification Number (VIN) Fitment Inquiries

Data: 17-character VIN, vehicle model/year/engine code, requested spare part, contact info. Purpose: Accurate OEM part identification and compatibility checks at the customer's explicit request. Legal basis: GDPR Art. 6(1)(b). Retention: Concluded inquiry or linked order retention (5 years).

3.6. Secure Online Payments

Providers: Revolut Bank UAB, OTP eBIZ / OTP Bank Nyrt. JP Parts never accesses or stores credit card numbers; transactions take place entirely on PCI-DSS certified payment interfaces.

3.7. Customer Support, Warranty and Complaints

Data: Inquiries, correspondence, warranty claims, complaint protocols. Legal basis: GDPR Art. 6(1)(f) and Art. 6(1)(c) (Consumer Protection Act). Retention: 3 years for official complaint records.

4. Cookies and Web Analytics

Our website uses essential cookies (cart, authentication, language) and optional analytical cookies (Google Analytics 4, Consent Mode v2). Any transatlantic data transfers involving Google services are conducted pursuant to the EU–U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCC).

5. Data Processors & Third-Party Partners

  • Web Hosting & Operation: LusteeNet Outdoor Adventure Kft., 1111 Budapest, Irinyi J. u. 47. (info@lusteenet.hu)
  • Server Rental & Technical Infrastructure: 3Gteam Kft., 1152 Budapest, Illyés Gyula u. 2-4. A. ép. fszt. 7. (info@3gteam.hu, www.3gteam.hu)
  • Single Sign-On & Analytics: Google Ireland Ltd. (Dublin, Ireland – Google Sign-In & Analytics 4, covered by EU–U.S. DPF)
  • Logistics / Courier: FedEx Express Hungary Kft. & DHL Express Magyarország Kft.
  • Payment Gateways: Revolut Bank UAB (Vilnius, Lithuania) & OTP Bank / OTP eBIZ Kft. (Budapest)

6. Your Rights & Supervisory Authority (GDPR Art. 79)

Under the GDPR, you have the right to access, rectify, erase ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise your rights, please email us at info@jpparts.eu.

Supervisory Authority (Hungary):

  • National Authority for Data Protection and Freedom of Information (NAIH)
  • Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary | Website: https://naih.hu | Email: ugyfelszolgalat@naih.hu

Court Proceedings (GDPR Article 79 & Info Act Section 22):

You are entitled to initiate legal proceedings before a court against the Data Controller if your rights under the GDPR have been infringed. At your choice, the lawsuit may also be filed before the competent Regional Court (Törvényszék) of your place of residence or domicile (https://birosag.hu/torvenyszekek).