Privacy Policy

This privacy policy explains how SantaVia Kft. (“SantaVia”, “we”) processes personal data collected through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Hungarian data protection legislation.

1. Data controller

The controller of the personal data described below is:
SantaVia Kft., 1052 Budapest, Sütő utca 2, 4th floor, Door 1, Hungary
Registration number: 01-09-454425
Tax number: 33013767-2-41
E-mail: [email protected]

SantaVia has not appointed a Data Protection Officer, as it is not required to do so under Article 37 GDPR. Any question about this policy can be addressed to the contact above.

2. Personal data we process

• Enquiry data. When you write to us through the contact form or by e-mail: name, e-mail address, company, country, the subject you select and the content of your message.
• Technical data. Data recorded automatically by our hosting provider for security and troubleshooting purposes: IP address, date and time of the request, pages requested, browser and operating system.
• Cookies. Only technical cookies necessary for the operation of the site. Details are given in our cookie policy.

This website does not sell products, does not create user accounts and does not carry out profiling or automated decision-making.

3. Purposes and legal bases

• Replying to your enquiry and managing the resulting business relationship — Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) or Article 6(1)(f) GDPR (our legitimate interest in responding to business correspondence).
• Security, availability and integrity of the website — Article 6(1)(f) GDPR (our legitimate interest in operating the site safely).
• Compliance with legal obligations, including accounting and tax obligations where a business relationship follows — Article 6(1)(c) GDPR.

Providing the data marked as required in the contact form is necessary to answer you; without it we cannot process your enquiry. Everything else is optional.

4. Recipients

Personal data may be made accessible to:

• our hosting and e-mail service providers, acting as data processors under Article 28 GDPR;
• the commercial, manufacturing and logistics partners involved in the project your enquiry concerns, where contacting them is necessary to answer you;
• professional advisers (legal, accounting, customs and regulatory) bound by confidentiality;
• public authorities, where disclosure is required by law.

We do not sell personal data and we do not use it for marketing purposes without your consent.

5. Transfers outside the European Economic Area

SantaVia operates an international network. Where answering an enquiry requires us to involve partners outside the European Economic Area, personal data may be transferred to the United Kingdom and to South Korea, both covered by an adequacy decision of the European Commission, or to Hong Kong, for which transfers are based on the Standard Contractual Clauses adopted by the European Commission together with appropriate supplementary measures. A copy of the safeguards in place can be requested at the contact address above.

6. Retention

• Enquiries that do not lead to a business relationship: up to 24 months from the last contact, then deleted.
• Correspondence connected to a business relationship: for the duration of the relationship and for the period required by applicable accounting, tax and limitation rules.
• Server logs: for the period applied by our hosting provider for security purposes, normally not exceeding 12 months.

7. Your rights

Under Articles 15 to 22 GDPR you have the right to:

• obtain confirmation as to whether we process your personal data and access it;
• obtain the rectification of inaccurate data and the completion of incomplete data;
• obtain the erasure of your data, where one of the grounds of Article 17 GDPR applies;
• obtain the restriction of processing, or object to processing based on our legitimate interest;
• receive the data you provided in a structured, commonly used and machine-readable format.

Requests can be sent to the contact address indicated in section 1. We reply within one month, as provided by Article 12(3) GDPR.

You also have the right to lodge a complaint with the Hungarian supervisory authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9-11, 1055 Budapest, Hungary — naih.hu, or with the supervisory authority of the country in which you live or work.

8. Security

The website is served over an encrypted connection (HTTPS). We apply technical and organisational measures appropriate to the risk, including access control, software updates and restriction of access to correspondence to the people who need it to carry out their work.

9. Changes to this policy

This policy may be updated to reflect changes in our activities or in applicable law. The date below indicates the version currently in force.

Last updated: September 2026