For the password-protected catalogue on armorers.hu

Effective date: 2026.05.01

1. Data Controller

Name: Armorers Kft.

Registered address: 1031 Budapest, Sulyok utca 1., Hungary

E-mail: info.armorerskft@gmail.com

Tax number: 25315215-2-41

2. Purpose and Scope of this Policy

This Privacy Policy describes the processing of personal data in connection with the login-protected catalogue available on the armorers.hu website (the „Website”), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information („Infotv.”).

3. How Access Is Granted

The catalogue available on the Website is visible only to logged-in users. User accounts are not created by the data subject through self-registration; access is granted by the Data Controller according to the following process.

• The interested party contacts the Data Controller by e-mail and requests access to the catalogue.
• The Data Controller decides, at its own discretion, whether to grant access.
• If access is granted, the Data Controller creates a username and password and sends them to the data subject by e-mail.
• The account only allows the data subject to view the catalogue; no other functionality is available.
• If the Data Controller decides that access should no longer be granted, the user account is deleted.

The Data Controller keeps a record — in an internal register with restricted access — mapping access requesters to the usernames issued to them.

4. Categories of Data Processed

Data	Purpose	Legal basis	Retention period
E-mail address (from the access request)	Sending the username and password	Performance of a contract / legitimate interest (GDPR Art. 6(1)(b) or (f))	Until the decision on granting access, or for as long as access remains active
Username, password (hashed)	Login and access to the catalogue	Performance of a contract (GDPR Art. 6(1)(b))	For as long as access remains active; the account is deleted if the Data Controller revokes access
Login session (session cookie)	Maintaining the logged-in state	Legitimate interest / strictly necessary cookie	Until the browser session ends / browser is closed

5. Cookies

To maintain the logged-in state, the Website uses one strictly necessary session cookie. This cookie:

• does not collect any data for purposes other than login,
• is deleted at the end of the session or when the browser is closed,
• does not require prior consent under the applicable rules, since it is essential for providing the service.

The Website does not currently use any analytics, marketing, or third-party cookies.

6. Processors and Data Transfers

The Data Controller uses the following processors:

• tarhely.eu – website hosting
• Google Ireland Limited (Gmail) – sending access credentials

The Data Controller does not transfer personal data to third parties, except where required to comply with a legal obligation.

7. Data Security

• Passwords are stored by the Data Controller only in encrypted (hashed) form and cannot be reversed to plain text.
• The mapping between access requesters and the usernames issued to them is protected by the Data Controller with restricted access.
• The Data Controller takes all reasonable technical and organisational measures to protect the data against unauthorised access, alteration, deletion, or disclosure.

8. Rights of Data Subjects

In relation to the processing of their personal data, data subjects have the following rights:

• the right of access (to request information about the data processed),
• the right to rectification,
• the right to erasure („the right to be forgotten”),
• the right to restriction of processing,
• the right to data portability,
• the right to object,
• the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or to seek judicial remedy.

NAIH contact details: 1055 Budapest, Falk Miksa utca 9-11., Hungary; postal address: 1363 Budapest, Pf. 9., Hungary; e-mail: ugyfelszolgalat@naih.hu; website: www.naih.hu

9. Contact

For any questions or requests regarding data processing, data subjects may contact the Data Controller at:

E-mail: info.armorerskft@gmail.com

10. Changes to this Policy

The Data Controller reserves the right to unilaterally amend this Policy. The version in force at any given time is available on the Website.