Privacy Policy

1. Data controller

Name:	Bánhidi Viktor Attila
Address:	1118 Budapest, Regős utca 11. 8. em. 36., Hungary
Tax number:	90151947-1-43
E-mail:	info@oldtimerevents.com

2. Scope

This notice covers all personal data processed through the oldtimerevents.com website: visitor data, registered user accounts, submitted listings, paid subscriptions and the newsletter. Processing is governed by the GDPR and Hungarian Act CXII of 2011 (Infotv.).

3. What we process and why

3.1 User accounts

When you register we process your name, e-mail address and password (stored as a one-way hash). If you sign in with Google, we receive your name, e-mail address and Google account identifier from Google; we never see your Google password. Legal basis: performance of a contract (GDPR Art. 6(1)(b)). Retention: until you delete your account.

3.2 Listings and submissions

Listings you submit (events, garage cars, directory entries) are published under your chosen title together with the content and photos you provide. For guest garage submissions we also process the submitter's name and e-mail address for moderation contact. Legal basis: performance of a contract (Art. 6(1)(b)). Retention: as long as the listing is published, or until you request its removal.

3.3 Subscriptions and payments

Paid plans are billed through Stripe. We store your subscription status, plan and Stripe customer reference; your card details are entered on and processed exclusively by Stripe — they never reach our servers. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligation for accounting records (Art. 6(1)(c), retained for 8 years under Hungarian accounting law).

3.4 Newsletter

If you subscribe to the newsletter we process your e-mail address. Legal basis: consent (Art. 6(1)(a)), which you may withdraw at any time via the unsubscribe link or by writing to us. Retention: until you unsubscribe.

3.5 Technical data and logs

Our servers record technical logs (IP address, browser, time of request) for security and abuse prevention — including rate-limiting of public submission forms. Legal basis: legitimate interest (Art. 6(1)(f)). Retention: up to 30 days.

4. Cookies

The website uses strictly necessary cookies only: a session cookie and a CSRF-protection cookie required for the site to function (logins, forms). These need no consent and expire at the end of your session. Should we introduce analytics or marketing cookies in the future, we will ask for your consent via a cookie banner first.

5. Recipients and processors

• Cégem 360 Kft. (1051 Budapest, Széchenyi István tér 7-8.) — website hosting and technical operation.
• Stripe Payments Europe, Ltd. (Dublin, Ireland) — payment processing for subscriptions.
• Google Ireland Ltd. (Dublin, Ireland) — "Sign in with Google" authentication.
• Map tiles and the map library are loaded from CARTO and the unpkg CDN; web fonts from bunny.net. These providers technically receive your IP address when the assets load.

6. Your rights

You may request access to, rectification or erasure of your personal data, restriction of processing, data portability, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting prior processing. Write to info@oldtimerevents.com — we respond within 30 days.

7. Data security

The website is served exclusively over encrypted (HTTPS) connections, passwords are stored using one-way hashing, and access to the server and the database is restricted and logged.

8. Remedies

If you believe your data has been processed unlawfully, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) — 1055 Budapest, Falk Miksa utca 9-11., www.naih.hu, ugyfelszolgalat@naih.hu — or bring the matter before a court.

9. Changes to this notice

We may amend this notice from time to time; the current version is always available on this page. Substantial changes will be announced on the website.