PRIVACY POLICY

1. Controller

eUROKART BUDAPEST Kft.
1052 Budapest, Vitkovits Mihály utca 8. 5. em. 13. ajtó
Company registration number: 01-09-192424
Tax number: 24972796-2-41
Privacy contact: info@flashkart.hu

This notice covers the website gokartbudapest.hu, online booking requests and recruitment applications submitted through the site.

2. Booking requests

Data: name, phone number, email address, selected service/package, track, requested date and time, number and category of drivers, event-related details, notes and the technical campaign/source identifiers attached to the request.

Purpose: handling the booking request, contacting you, organising the requested service and, where a booking is accepted, preparing and performing the contract.

Legal basis: GDPR Article 6(1)(b) (steps at your request before entering into a contract / performance of a contract). Data needed for invoicing or mandatory accounting is processed under Article 6(1)(c). Data required to establish or defend legal claims may be retained under Article 6(1)(f).

Retention: booking records may be retained for up to 5 years after the booking matter is closed where needed for contractual claims. Accounting documents are retained for the statutory accounting period, generally 8 years.

3. Recruitment applications

Data: name, email, phone, date of birth, language skills, number of days available per week, hospitality experience and the work-history summary you submit.

Purpose: assessing whether your profile and availability match a current FlashKart role, checking whether age-related employment rules may apply, and contacting you during the recruitment process.

Legal basis: GDPR Article 6(1)(b), because the processing is carried out at your request in order to take steps before a potential employment contract. We do not use the application to build a long-term candidate database without a separate legal basis.

Retention: applications submitted through this website are automatically deleted from the website system 180 days after submission. To prevent automated abuse, a pseudonymous one-way hash derived from the connection IP may be kept temporarily for approximately 10 minutes for rate limiting. If an employment relationship is created, employment-related records are handled separately under the relevant employment privacy rules.

Fields marked as required are necessary to submit the application through this form. If they are not provided, the online application cannot be sent.

4. Website operation, logs and security

When the site is loaded, the web server may process technical data such as IP address, request time, requested URL, browser/user-agent information and error/security logs. The purpose is to deliver the website, diagnose faults, prevent abuse and maintain IT security.

Legal basis: GDPR Article 6(1)(f), our legitimate interest in operating a secure and reliable website. Technical logs are kept only for as long as needed for these purposes, normally no longer than 30 days unless a security incident requires longer retention.

5. Cookies, analytics and advertising

Necessary / preference storage: the site may store the selected language (flashkart_lang) and your cookie-consent choice (flashkart_consent_v1) for up to 1 year so that the site remembers your settings. These are used to provide the requested functionality and record your consent decision.

Analytics and marketing: if enabled by the operator, Google Analytics / Google Ads, Meta Pixel and Conversions API, Microsoft Clarity and other configured measurement tools run only according to the consent settings shown by the site. The legal basis for non-essential analytics and marketing storage is your consent under GDPR Article 6(1)(a), which you can withdraw at any time through the cookie settings.

Where Meta Conversions API is enabled and you have granted marketing consent, contact identifiers connected to a booking conversion may be normalised and cryptographically hashed before being sent for conversion matching. The original plain-text identifiers are not sent in that matching payload.

6. Embedded Google reviews and maps

The site can display public Google reviews through GR Widget (grwidget.com), operated by EXTHUS LTD. Loading the external script necessarily involves technical connection data such as IP address and browser/request information. GR Widget states that its embed does not load advertising trackers or fingerprint visitors and that widget loads are counted anonymously for abuse prevention. FlashKart uses it only to display public review content.

The track section also contains embedded Google Maps for the Blaha and KÖKI locations. When a map is loaded, Google can receive technical connection data such as your IP address, browser information and the requested map content, and may process data under its own privacy terms.

7. Processors and recipients

Some global technology providers may process data outside the European Economic Area. Where this occurs, transfers must rely on an applicable GDPR transfer mechanism, such as an adequacy decision or standard contractual clauses.

8. Your rights

You may request access to your personal data, rectification, erasure or restriction of processing where the GDPR conditions are met. You may object to processing based on legitimate interest, request data portability where applicable and withdraw consent at any time without affecting processing carried out before withdrawal.

Requests can be sent to info@flashkart.hu. We may ask for reasonable information to verify your identity before fulfilling a request.

9. Complaint to the supervisory authority

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu
Phone: +36 1 391 1400
www.naih.hu

You may also seek judicial remedy. No decision producing legal or similarly significant effects is made solely by automated processing on this website.