This notice explains what personal data the shinelabcars.com website processes, why, for how long, and what your rights are. Processing follows the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Hungarian Act CXII of 2011 on informational self-determination. The Hungarian version prevails.
1. Data controller
| Name | ShineLab Cars Premium Detailing |
|---|---|
| Registered office | to be published after company registration |
| Registration number | to be published after company registration |
| Tax number | to be published after company registration |
| Privacy contact | the contact form |
| Website | shinelabcars.com |
2. What we process and why
2.1. Appointment and quote requests (contact form)
| Data | name, email, phone (optional), vehicle make, model and size, requested services, preferred date, message, time of submission. |
|---|---|
| Purpose | replying to your enquiry, quoting and scheduling. |
| Legal basis | steps taken at your request prior to entering into a contract – GDPR Art. 6(1)(b). |
| Retention | up to 1 year after the enquiry is closed if no order follows; accounting records are kept for 8 years as required by Hungarian Act C of 2000, s. 169. |
| Note | contact form submissions are delivered by email and are not stored in the website database. Previously submitted configurator enquiries may remain in a private WordPress archive accessible only to administrators. The configurator has been withdrawn and no longer collects new data. |
2.2. ShineLab Club membership
| Data | name, email, password (irreversibly hashed), card display name, profile photo (optional), card identifier (QR code), points balance, point transactions (date, points, receipt reference, note, staff member), login session data. |
|---|---|
| Purpose | providing the membership, crediting and redeeming points, keeping a traceable record. |
| Legal basis | performance of the membership contract – GDPR Art. 6(1)(b). |
| Retention | until the membership ends. Deleting the account also deletes the card, point history, sessions and uploaded photo. |
| Note | profile photos are stored in the media library at a public URL – please do not upload sensitive images. |
2.3. Security of the website and accounts
| Data | a one-way hash of your IP address and the number of attempts; the hosting provider's server logs. |
|---|---|
| Purpose | preventing abuse, spam and password-guessing. |
| Legal basis | legitimate interest – GDPR Art. 6(1)(f): protecting the website and user accounts. |
| Retention | attempt counters expire automatically within 15 minutes to 1 hour; server log retention is set by the hosting provider. |
3. Cookies
The website uses only cookies that are necessary for it to work. We use no analytics, advertising or social-media tracking cookies and load no third-party fonts or scripts, so no cookie consent banner is shown.
| Cookie | Purpose | Lifetime |
|---|---|---|
sl_lang | remembers your language | 120 days |
slc_member_v2 | keeps a Club member signed in | 1 day, 30 days with “Remember me” |
sessionStorage | welcome screen, chosen vehicle size and music state (browser storage, not a cookie) | until the tab is closed |
wordpress_* | sign-in of site administrators only | session, up to 14 days |
4. Social media
Links to our Instagram and Facebook pages are plain links; no data is sent to Meta Platforms before you click. Meta's own privacy terms apply on those pages.
5. Who can access the data
| Hosting provider | to be published after company registration to be published after company registration |
|---|---|
| Email delivery | the hosting provider named above |
We do not transfer data outside the EU and never sell or rent it.
6. Security
The site runs over HTTPS, passwords are stored hashed, and only authorised staff can access the admin area or record points.
7. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21). Contact us via the contact form. We reply within one month, which may be extended by two months where justified.
8. Complaints
You may lodge a complaint with the Hungarian supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11.; postal address 1363 Budapest, Pf. 9.; phone +36 1 391 1400; ugyfelszolgalat@naih.hu; naih.hu. You may also go to court.
9. Other
Our services and the Club are intended for people aged 16 and over. We update this notice when our processing changes.