Az "Elfogadom" gombra kattintva Ön hozzájárul, hogy az Adatkezelési Tájékoztatóban foglaltak szerint sütiket használjunk a jobb felhasználói élmény érdekében.
To utilize our services (e.g., renting a vehicle or subscribing to our newsletter), it is essential that we process certain personal data. In this notice, we provide detailed information about which personal data we process, for what purposes, and for how long, as well as who we may share it with and for what reasons. Additionally, we inform you about your rights concerning this matter.
Please read this notice carefully, and if you have any questions, contact us at info@nextautorent.hu before accepting the terms.
Please note that you are entitled to object to the processing of your personal data at any time if it is based on our legitimate interest or used for advertising purposes.
1. Who will process your personal data?
Your data will be processed by Next Auto Rent Ltd. (registered office: 195 Budapest, Üllői út 309.; company registration number: Cg. 01-09-444860) as the data controller (hereinafter referred to as “Next Car Rental”). Contact details:
- Mailing address: 1097 Budapest, Könyves Kálmán krt. 12-14. Lurdy-ház III.em. 203.
- Email: info@nextautorent.hu
- Phone: +36 1 998 8310
- Website: nextcarrental.hu
- Name of the representative: Gyula Jancsó, Managing Director.
2. For what purposes and on what legal grounds do we process your personal data?
2.1. Each piece of personal data is processed for a specific purpose as described below, and we do not combine purposes (e.g., we only send newsletters if you have explicitly consented to this during contract formation). If we wish to process your personal data for a purpose different from the one initially provided, we will inform you in advance.
2.2. Depending on the purpose of processing, the legal basis for handling your data may vary. It could be a statutory obligation (e.g., invoicing), performance of a contract with you, our legitimate interest (e.g., resolving legal disputes), or your consent:
- For statutory obligations, data processing is mandatory and independent of your consent or objection.
- For contract preparation/performance, providing the requested personal data is not mandatory but is necessary for the contract’s conclusion. Without it, the desired service cannot be provided.
- For legitimate interest, as a customer of Next Car Rental, you can reasonably expect that certain data may need to be shared with authorities (e.g., NAV, police), insurance companies, or courts to comply with regulations regarding vehicle usage. These instances are occasional, do not involve sensitive data, and often serve your interest (e.g., during damage settlement).
For consent, we do not require your personal data for the above purposes.
- However, certain convenience services (e.g., purchasing on the website) can only be utilized if you provide prior consent after reviewing this notice. If you do not consent, you will not face any disadvantage.
2.3. The purposes of data processing and related legal bases are summarized in the following table:
| Purpose of Processing |
Legal Basis |
| Requesting/Providing Quotes |
Preparation of Contract |
| Sales |
Performance of the concluded contract |
| Vehicle Rental |
Performance of the rental contract |
| Website Registration |
Consent |
| Newsletter |
Consent |
| Prize Games |
Consent |
3. What personal data do we process?
3.1. Personal data refers to any information related to you as an individual that can directly or indirectly identify you (e.g., customer identification, billing, contact data, or vehicle identification details).
3.2. For each listed purpose, we process the identification and contact details provided in the service’s contract or (online) form.
Additional data processed for each purpose is listed in the following table:
| Purpose |
Personal Data Processed |
| Requesting/Providing Quotes |
Data regarding the requested service/product |
| Sales |
Data related to the selected product; billing information |
| Vehicle Rental |
Data of the rented vehicle; billing details |
| Website Registration |
Password, profile data provided after login |
| Newsletter |
Data related to interests in vehicle rental |
| Prize Games |
Data related to interests in vehicle rental |
4. How long do we retain your personal data?
4.1. Personal data is retained only as long as necessary for the relevant service. After this period, digital data will be permanently deleted, and paper-based data will be destroyed.
4.2. Tax and accounting documents must be retained for the duration specified by applicable laws (e.g., accounting documents for at least 8 years, tax-related documents until the expiration of tax assessment rights).
4.3. For each listed purpose, personal data may be retained (based on legitimate interest and as circumstances warrant) until our legal claims can no longer be enforced.
4.4. The following table summarizes the data retention periods:
| Purpose |
Retention Period |
| Requesting/Providing Quotes |
Until the quote’s fulfillment or 1 month post-communication if no contract is concluded |
| Sales |
Until the end of the contract’s last service (e.g., warranty expiration) or statutory retention period |
| Vehicle Rental |
Until the end of the contract’s last service or statutory retention period |
| Website Registration |
Until withdrawal of consent or account deletion |
| Newsletter |
Until withdrawal of consent or service termination, otherwise 5 years from consent |
| Prize Games |
Until withdrawal of consent or announcement conclusion; winner data until prize collection |
5. Who do we share your personal data with and for what purposes?
5.1. In certain cases, your personal data may be shared with data processors or other controllers. Sharing typically occurs to fulfill a contract with you.
5.2. Personal data may be shared with the following companies within the group for legitimate interests:
- Ford Petrányi Ltd. (1106 Budapest, Kerepesi út 105.)
- Next Auto Ltd. (1195 Budapest, Üllői út 309.)
5.3. Digital personal data is stored with the following service providers who maintain our IT and administrative systems (collectively referred to as "IT Providers"):
- Infosector Ltd. (2013 Pomáz, Kond utca 14.) - internal IT system service provider
- BR2 Studio Ltd. (8220 Balatonalmádi, Hunyadi utca 10.) - website operation and content management
- MailChimp (The Rocket Science Group, LLC; 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA) - for newsletter system operation.
6. Security camera usage policy
At the headquarters and premises (offices) of Next Car Rental, closed-circuit security cameras are used. Below, we provide details on data recording related to these cameras.
6.1. Purpose of data processing: Monitoring customer traffic and employees for personal and property protection reasons (e.g., monitoring vehicles in the parking area). Specific objectives include:
- Preventing, detecting, and proving violations;
- Identifying unauthorized entrants and recording the fact of their entry;
- Documenting the activities of unauthorized occupants;
- Examining circumstances of workplace and other accidents;
- Investigating and addressing complaints.
6.2. Legal basis for data processing: Legitimate interest of the data controller based on personal and property protection. Given the size of Next Car Rental's premises, comprehensive protection cannot be implemented without security cameras (e.g., solely through security personnel). An additional justification is supporting law enforcement agencies and injured or damaged individuals. Measures to protect privacy include:
- Cameras do not record audio and only operate in designated areas marked with signs (e.g., parking lots, entrances, showrooms, service areas, sales points). Human dignity must not be violated under any circumstances;
- Only designated personnel can access recordings (view and decide on their use);
- Individuals appearing in recordings may request information about their rights and remedies at info@fordpetranyi.hu.
6.3. Personal data processed: Images, movements, and behavior of individuals present at Next Car Rental headquarters and premises.
6.4. Data retention period: If not used, recordings are retained for 3 working days. "Use" refers to situations where recordings or other personal data are used as evidence in judicial or other legal proceedings.
6.5. Data sharing: Only the internal security service of Next Car Rental and Infosector Ltd., responsible for camera maintenance, have access to recordings.
7. Website usage policy
Below, we provide information on data processing related to visiting our website.
Please note that Next Car Rental assumes no responsibility for data processing on other websites (e.g., social media platforms such as Facebook, YouTube) visited by navigating away from our site.
7.1. Purpose of data processing: Enhancing website functionality and providing convenient, customized service. Cookies (small data packages) are placed on the visitor’s computer when visiting the website. Cookies help identify the visitor's browser and enable user-friendly services (e.g., remembering previous purchases in the webshop or offering to save login details).
You can disable cookies in your browser settings. Please note that disabling cookies may result in suboptimal website performance.
The purposes of cookies used by the website include:
- eu-cookie: Stores information on whether the visitor has accepted the cookie usage warning displayed at the bottom of the screen;
- wires: A general-purpose session cookie storing technical information necessary for website operation, preventing data loss (e.g., data ensuring secure form submissions);
- _ga, _gid, _gat_gtag_UA_111107857_1: Cookies placed by Google Analytics, analyzing website traffic and visitor behavior. (Google Analytics cookies operate independently of the website server).
7.2. Legal basis for data processing: Performance of contracts accessible via the website (monitoring the creation, modification, or performance of contracts). In other cases, the legal basis is legitimate interest (ensuring secure website operation and preventing misuse).
7.3. Personal data processed: Data recorded by the visitor and server logs (date, time, IP address). Google Analytics cookies record browser type, version, subpages visited, and time spent on subpages.
7.4. Data retention period: Cookies retain data for the following durations:
- - _ga: 2 years;
- - _gid: 24 hours;
- - _gat_gtag_UA_111107857_1: 1 minute;
- - wires: Until session ends (or 24 minutes if inactive, or upon browser closure).
7.5. Data sharing: Website usage data is accessible only to employees of "BR2 Studio" Ltd. and Infosector Ltd. responsible for website operation and maintenance.
8. Your data protection rights
8.1. Withdrawal of consent: You can withdraw your consent at any time, free of charge, if the legal basis for our data processing is your consent (refer to the above tables). Upon withdrawal, your personal data will be deleted. For example, unsubscribing from our newsletter will result in the deletion of all data provided during the subscription, and you will no longer receive newsletters from us.
It is important to note that withdrawal does not affect the legality of our data processing prior to the withdrawal. In some cases, even after withdrawal, we may legally process your personal data – we will inform you about such cases in detail.
8.2. Access to your personal data: You can request information at any time about whether we process your personal data for any purpose. If we do, we will provide you with a copy of all data processing activities involving you electronically (or on paper upon request) and inform you of your related rights.
8.3. Rectification: You can notify us at any time if you notice an error in your personal data or request that we update or complete it (e.g., in case of an address change).
8.4. Deletion: You can request the deletion of certain or all personal data processed by us. Personal data will also be deleted in the following cases: consent is withdrawn; the processing period has ended; deletion is required by law; or we no longer need the personal data.
It is important to note that in some cases, the retention of your personal data is required by law, or we may need it to enforce our legal claims. If there is any obstacle to deleting your data, we will inform you in detail.
8.5. Restriction of data processing: In some cases, you may find it more appropriate to restrict data processing rather than request deletion. In such cases, you can request that your personal data be stored only, without further processing.
You can request data processing restriction if:
- You believe that the personal data we have is inaccurate (in this case, the restriction applies until we investigate and correct the data);
- You believe we are processing your data unlawfully but oppose deletion;
- We no longer need the personal data for processing, but you require it for legal purposes;
- You object to our processing of your data (see below; the restriction applies while we investigate).
It is important to note that we may lift the restriction upon your explicit consent, or if it is necessary to enforce our legal claims or comply with a legal obligation. In such cases, you will be informed in advance.
8.6. Right to object: You can object to the processing of your personal data for direct marketing or if the legal basis for processing is our legitimate interest. In such cases, we will delete your data unless we can demonstrate that processing is necessary for legal claims or essential for legal obligations.
8.7. Data portability: You are entitled to receive the personal data you provided in a structured, commonly used, and machine-readable format and to transfer it to another controller. Alternatively, you may request us to directly transfer your data to another controller where technically feasible. This applies only if the legal basis for processing is consent or contract performance and the processing is automated.
8.8. Right to complain: If you believe we have violated data protection regulations, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
We encourage you to first contact us so we can address and resolve your concerns promptly.
8.9. Right to legal remedy: If you believe your rights have been violated, you may bring a case before a competent court based on your residence or place of stay. For more information, visit birosag.hu.
9. Apple Pay Integration
Our app integrates with Apple Pay to provide a secure and convenient payment method. When you choose to use Apple Pay for transactions, please note the following:
9.1. Data Collection and Processing: We do not collect or store any payment information processed through Apple Pay. All payment details, such as credit or debit card numbers, are securely handled by Apple and your payment provider.
Apple Pay uses a device-specific number and unique transaction code, ensuring your payment information is never shared with us or stored on your device.
9.2. Transaction Details: While we receive confirmation of your payment status (e.g., success or failure) to complete your transaction, we do not receive or store your full payment information.
Transaction details, such as the items purchased, may be collected in accordance with our general privacy practices, as outlined in the sections of this Privacy Policy addressing purchases.
9.3. Security: Apple Pay is designed with privacy and security in mind. For more details on how Apple Pay protects your payment information, please refer to Apple's Privacy Policy.
9.4. Your Consent: By using Apple Pay in our app, you agree to Apple's terms and conditions for Apple Pay and to our handling of your transaction details as described above.
9.5. Third-Party Involvement: Payments processed through Apple Pay involve third-party financial institutions. Please consult their privacy policies for more information on how they handle your data.
10. Additional important information
10.1. Processing requests: To exercise any of the above rights, send an email to info@nextautorent.hu. We will act promptly, typically within 1 month of receiving your request. In complex or large requests, this period may extend to 2 months.
10.2. Data security: Personal data is stored on secure servers with antivirus protection, firewalls, and strong passwords, guarded by security personnel. Paper-based data is stored in lockable, fireproof cabinets. Regular backups are performed.
10.3. Your responsibility: Ensure your personal data is accurate and promptly update it when changes occur. Use secure devices, software, and networks to prevent unauthorized access.
10.4. Changes to this policy: We may modify this policy. In such cases, you will be informed of the changes and the effective date via email or our website.
In matters not addressed in this Privacy Notice, the provisions of the European Union's General Data Protection Regulation (GDPR) and applicable Hungarian laws apply. Hungarian law governs this Privacy Notice.
