Privacy Policy

1. Who we are

BZ Fleet Solutions Kft. ("BZ Fleet", "we", "us" or "our") operates the website at bzfleet.com and its export brokerage platform. We are the data controller responsible for your personal data under Regulation (EU) 2016/679 (the "GDPR") and the Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information ("Infotv.").

2. Scope of this policy

This policy explains how we collect, use, disclose and protect personal data when you:

• visit or browse our website;
• submit an enquiry, request a quote or otherwise contact us;
• register for or use our partner portal (the Dealer Zone or Buyer Zone); or
• otherwise interact with BZ Fleet in connection with our new-car export brokerage services.

Our website may contain links to third-party websites. This policy does not apply to those sites, and we are not responsible for their privacy practices.

3. Personal data we collect

3.1 Website visitors

When you browse the site, we and our hosting provider may automatically process technical data such as your IP address, approximate location (used to route you to the correct regional version of the site), browser type, device information, pages visited and timestamps, contained in server log files.

3.2 Enquiry and contact forms

When you send us an enquiry or request a quote, we process the data you provide, typically your name, email address, phone number, country, the vehicle(s) you are interested in and the content of your message.

3.3 Partner portal (Dealer & Buyer Zone)

If you register as a partner, we process the account and profile data you supply, which may include: contact name, company name, email address, phone number, country and language, preferred contact window and time zone, delivery / pickup details, and the record of your GDPR consent (including the consent date). We also process transaction-related information generated through the platform in the course of sourcing, supplying and exporting the vehicle you order.

3.4 Cookies and similar technologies

See section 5 below.

We do not knowingly collect personal data from children, and our services are directed at businesses and adult buyers only. We do not carry out automated decision-making that produces legal or similarly significant effects on you.

4. Purposes and legal bases

We only process personal data where we have a lawful basis under Article 6 GDPR:

Purpose	Data	Legal basis
Responding to enquiries and providing quotes	Contact and enquiry data (3.2)	Steps taken at your request prior to entering into a contract, and our legitimate interest in answering you — Art. 6(1)(b) & (f)
Providing and administering the partner portal and brokerage services	Account, profile and transaction data (3.3)	Performance of a contract — Art. 6(1)(b)
Operating, securing and improving the website	Technical / log data (3.1)	Our legitimate interest in a secure, functioning site — Art. 6(1)(f)
Recording your marketing / data-processing consent	Consent record and date (3.3)	Consent — Art. 6(1)(a)
Meeting legal, accounting and tax obligations	Contract, billing and correspondence data	Compliance with a legal obligation — Art. 6(1)(c)
Establishing, exercising or defending legal claims	Relevant records	Our legitimate interest — Art. 6(1)(f)

Where processing relies on your consent, you may withdraw it at any time (see section 10); withdrawal does not affect the lawfulness of processing before withdrawal.

5. Cookies

We use cookies and similar local-storage technologies to make the site work, remember your preferences (such as dismissing the cookie notice) and understand how the site is used. Cookies fall into two broad groups:

• Strictly necessary — required for the site and portal to function (for example, keeping you logged in and remembering your cookie choice). These are set on the basis of our legitimate interest.
• Analytics / preference — help us understand and improve the site. These are set only where permitted, on the basis of your consent.

You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the site or portal from working correctly.

6. Who we share data with

We do not sell your personal data. We act as principal — we buy and resell the vehicles ourselves — and we do not operate as a marketplace that introduces buyers and dealers to one another. We share personal data only where necessary, with:

• Parties involved in fulfilling your order — as we source, resell and export vehicles in our own name, we share only the data strictly necessary to prepare, transport, deliver and register a specific vehicle (for example, delivery, transport or registration details). We do not disclose a Buyer's identity or contact details to our sourcing dealers for their own purposes, and we keep our sourcing relationships confidential.
• Service providers (data processors) acting on our instructions — including our hosting provider, Tárhely.Eu Kft. (registered seat: 1132 Budapest, Victor Hugo utca 18-22.), and providers of email, IT and analytics services.
• Professional advisers and authorities — such as accountants, lawyers, and tax or public authorities, where required by law.

All processors are bound by written agreements requiring them to protect your data and to process it only as instructed, in line with Article 28 GDPR.

7. International data transfers

Our export brokerage connects buyers and dealers across different countries. Where a transaction involves a buyer or dealer located outside the European Economic Area (EEA), or where a service provider processes data outside the EEA, your personal data may be transferred internationally.

When we transfer personal data outside the EEA, we ensure an appropriate level of protection through one of the safeguards permitted by Chapter V GDPR — typically an adequacy decision of the European Commission, or the European Commission's Standard Contractual Clauses together with any additional measures required. You may request a copy of the relevant safeguards using the contact details in section 13.

8. How long we keep data

• Enquiries that do not lead to a contract: up to 12 months from last contact, then deleted.
• Partner accounts: for the duration of the account, then deleted or anonymised within a reasonable period after closure.
• Accounting and tax records: for the period required by Hungarian law (generally 8 years for accounting documents).
• Consent records: for as long as needed to demonstrate compliance, and in line with applicable limitation periods.
• Server logs: for a short period for security and troubleshooting, then deleted or anonymised.

When data is no longer needed for the purposes above and no legal obligation requires us to keep it, we securely delete or anonymise it.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure — including encrypted (HTTPS) transmission, access controls, and hosting with a professional provider. No transmission or storage system is completely secure, but we work to protect your data and to review our measures regularly.

10. Your rights

Subject to the conditions in the GDPR, you have the right to:

• Access your personal data and receive a copy (Art. 15);
• Rectify inaccurate or incomplete data (Art. 16);
• Erase your data ("right to be forgotten") (Art. 17);
• Restrict processing in certain circumstances (Art. 18);
• Data portability — receive your data in a structured, machine-readable format and have it transmitted to another controller (Art. 20);
• Object to processing based on our legitimate interests (Art. 21);
• Withdraw consent at any time, where processing is based on consent (Art. 7(3)).

To exercise any of these rights, contact us at info@bzfleet.com. We will respond without undue delay and in any event within one month, as required by Article 12 GDPR. We may need to verify your identity before acting on your request.

11. Right to lodge a complaint

If you believe we have not handled your personal data lawfully, we would appreciate the chance to resolve it directly. You also have the right to lodge a complaint with the Hungarian supervisory authority:

You may also seek a judicial remedy before the competent court.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The current version, with its "Last updated" date, will always be available on this page. Material changes will be highlighted where appropriate.

13. Contact us

For any question about this policy or about how we handle your personal data, please contact: