Privacy policy

This page explains what personal data we process when you use perfectpos.hu, what we use it for, how long we keep it and what your rights are.

Effective from 1 November 2026

This is a translation for your convenience. The Hungarian version is the legally binding one.

Measured without cookiesWe measure visits in aggregate, without cookies, and do not identify individual visitors. There are no advertising or social media tracking cookies.
Only what you give usWe only receive personal data when you request a quote or a callback, write to us, or place an order.
Deleted after 30 daysIf your quote or callback request does not lead to a contract, we delete your details within 30 days.
Your data is yoursYou can ask at any time what we hold about you, and have it corrected or deleted.

1.Who we are

This policy covers the use of the perfectpos.hu website, enquiries made through it and orders placed in the online shop. It has been prepared in line with Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.

Company: PerfectGroup Ügyfélszolgálati Kft.
Registered office: 1156 Budapest, Szilas park 10. fszt. 1.
Company registration number: 01-09-403527 (Fővárosi Törvényszék Cégbírósága)
Tax number: 32030697-2-42
Represented by: Fischer Péter Elemér, Managing Director
Email: ugyfelszolgalat@perfectpos.hu
Phone: +36 1 550 7750
Website: perfectpos.hu

2.What data we process and when

If you simply browse the site without entering anything, we process no personal data about you apart from the server’s technical log. For each case below, we explain why we use the data, what it is, our legal basis and how long we keep it.

Requesting a quote through the online form

Why?: So that one of our team can contact you and give you a quote for myPOS services tailored to your business.
What data?: Your type and name of business, tax or registration number, your first name and surname, email address and phone number, your expected monthly card turnover, the myPOS services you are interested in, and any comments.
Legal basis: Your consent, given by ticking the box when you submit the form [GDPR Art. 6(1)(a)]. We record when you gave it.
How long?: If no contract is concluded within 30 days, or you withdraw your consent, we delete it. If you sign a contract with us, we process the data under that contract.

Requesting a callback on the Contact page

Why?: So that one of our team can call you back and answer your questions.
What data?: Your first name and surname and your phone number.
Legal basis: Your consent, given by ticking the box when you submit the form [GDPR Art. 6(1)(a)]. We record when you gave it.
How long?: If no contract is concluded within 30 days, or you withdraw your consent, we delete it.

Protecting the forms from abuse

Why?: To filter out automated and bulk submissions. No more than five forms can be sent from one network per hour.
What data?: The sender’s IP address and the time of submission.
Legal basis: Our legitimate interest in keeping the forms and our systems secure [GDPR Art. 6(1)(f)].
How long?: Deleted together with the quote or callback request, under the same rules.

Protecting shop orders from abuse

Why?: To filter out automated and bulk orders. No more than ten orders can be placed from one IP address per hour.
What data?: The IP address of the person ordering and the number of orders.
Legal basis: Our legitimate interest in keeping the shop and our systems secure [GDPR Art. 6(1)(f)].
How long?: Up to one hour, after which it is deleted automatically.

Measuring visits

Why?: To see how many people visit the site, where they come from, which pages they view and how quickly those pages load, so that we can improve it. We use the Cloudflare Web Analytics service for this.
What data?: The address of the page opened and of the previous page, the type of browser and device, the country and page load times. The measurement uses no cookies or data stored in your browser and does not follow individual visitors; we only see aggregate figures.
Legal basis: Our legitimate interest in understanding and improving how the website works [GDPR Art. 6(1)(f)]. You can object to this processing.
How long?: Cloudflare keeps the detailed measurement data for 7 days and then aggregates it; the aggregate figures are available for 6 months. We receive no data that can be linked to an individual visitor.

Contacting us by email or phone

Why?: To answer your question and, if you ask, to give you a quote.
What data?: Your name, email address or phone number, and whatever you tell us in your message or during the call.
Legal basis: Your consent, given by contacting us [GDPR Art. 6(1)(a)].
How long?: If your enquiry does not lead to a contract within 30 days, or you withdraw your consent, we delete it.

Opening a myPOS account

Why?: If you decide to open a myPOS account, we pass the details needed to open it to myPOS at your request.
What data?: The details you gave us in your quote request, plus any that myPOS asks us for to open the account.
Legal basis: Steps taken at your request before entering into a contract [GDPR Art. 6(1)(b)].
How long?: Once passed on, myPOS processes the data as an independent controller under its own privacy policy. We keep our copy in line with the contract.

Buying from the online shop

Why?: To process and confirm your order by email, take payment, deliver the product and keep in touch with you about the order. Your order goes from the shop to our client portal (ugyfelportal.perfectgroup.hu), where we process it.
What data?: Your name, email address, phone number, billing and delivery address, your company name and tax number if you buy as a business, your notes, the products ordered, the order number and date, and the outcome of the payment (card type and last four digits, and the myPOS transaction reference).
Legal basis: Performance of the contract [GDPR Art. 6(1)(b)]. Without this data we cannot fulfil the order.
How long?: Until the civil-law limitation period expires: 5 years from the performance of the contract.

Withdrawal notices

Why?: To record, acknowledge and deal with your withdrawal notice.
What data?: Your name, email address, the contract reference (such as the order number), the products if you list them, and the date and time you sent it. The data goes to our client portal.
Legal basis: Legal obligation under Hungarian Government Decree 45/2014 (II. 26.) [GDPR Art. 6(1)(c)].
How long?: Until the civil-law limitation period expires, the same as the order data: 5 years.

Invoicing

Why?: To issue the invoice and keep the accounting records.
What data?: The buyer’s name and address, a company’s tax number, and the details of the purchase.
Legal basis: Legal obligation: issuing an invoice is required by section 159 of Hungarian Act CXXVII of 2007 on VAT [GDPR Art. 6(1)(c)].
How long?: 8 years, under section 169 of Hungarian Act C of 2000 on accounting.

Warranty and guarantee claims

Why?: To deal with your warranty or guarantee claim.
What data?: Your name and address, the name and price of the product, the dates of purchase and of reporting the fault, a description of the fault, the remedy you are asking for, and how the claim was settled.
Legal basis: Legal obligation under Hungarian NGM Decree 19/2014 (IV. 29.) [GDPR Art. 6(1)(c)].
How long?: The record is kept for 3 years from when it was made.

Consumer complaints

Why?: To investigate and respond to your complaint.
What data?: Your name, address, phone number, email address and the content of the complaint.
Legal basis: Legal obligation under section 17/A of Hungarian Act CLV of 1997 on consumer protection [GDPR Art. 6(1)(c)].
How long?: The record of the complaint and our reply are kept for 5 years.

Technical log for running the website

Why?: To keep the website running securely, fend off attacks and track down faults.
What data?: IP address, time of the visit, address of the page opened, browser type and the address of the previous page. The server records these automatically, and we do not link them to any other data.
Legal basis: Our legitimate interest in the secure and uninterrupted running of the website [GDPR Art. 6(1)(f)].
How long?: Up to 12 months.

We do not send newsletters, make automated decisions based on your data, or build a profile of you.

3.Cookies and data stored in your browser

perfectpos.hu itself sets no cookies. We store just one thing in your browser: the contents of your basket (the products and quantities), in your browser’s local storage (“ppos-kosar”), so it isn’t lost as you move between pages. It contains no personal data, only reaches our server when you send your order, and is cleared once the order is placed. As this is strictly necessary for the purchase you ask for, we do not ask for consent to it, nor for cookie consent.

The following services may use cookies they need in order to work:

Quote and callback forms: the form loads from our client portal (ugyfelportal.perfectgroup.hu), which uses a session cookie (“perfectgroup-crm-session”). It is deleted when you close your browser.
Security service: Cloudflare may set cookies needed to filter out automated attacks: “__cf_bm” (lasts 30 minutes) and, if your browser has to pass a security check, “cf_clearance”. They do not follow you around other sites.
Card payment: the myPOS payment page, which you go to in order to pay, may use cookies under its own policy.

4.Who we share data with

PerfectGroup Ügyfélszolgálati Kft. itself hosts the website and the client portal. Only those members of our team who need your data for their work can see it. We never sell your data, and we only share it with the partners below, or with an authority where the law requires it.

Hetzner Online GmbH: Industriestr. 25, 91710 Gunzenhausen, Germany. Processor: physical hosting of the server in a data centre in Germany, within the European Union.
Cloudflare, Inc.: 101 Townsend St., San Francisco, CA 94107, USA. Processor: security and content delivery service, which is why it sees visitors’ IP addresses; it also carries out the measurement of visits. It takes part in the EU–US Data Privacy Framework, so the transfer is covered by the European Commission’s adequacy decision.
myPOS Ltd.: 12 St. Stephen’s Green, Dublin D02 WK11, Ireland · help@mypos.com. Handles card payments: to do so it receives the order number, amount and items from us. You give the details requested on its payment page (such as your card details) directly to myPOS, which handles them under its own privacy notice; your card details never reach us. When you open an account, it receives your details as an independent controller.
FOXPOST Zrt.: Maklári út 119., 3300 Eger, Hungary · info@foxpost.hu. If you choose FoxPost, it delivers the products you order: it receives your name, chosen parcel locker, phone number and email address.
Magyar Posta Zrt.: www.posta.hu. If you choose Magyar Posta, it delivers the products you order: it receives your name, chosen pickup point, phone number and email address.

The site links to other websites (for example, myPOS pages). These follow their own privacy rules, and we are not responsible for them.

5.How we keep your data safe

The website and the client portal are only available over an encrypted (HTTPS) connection. Our staff sign in to the client portal with two-step verification, and everyone sees only the data they need for their work. Should a personal data breach ever occur that poses a high risk to you, we will tell you without delay.

6.Your rights

Access: you can ask what data we hold about you and request a copy. The first copy is free.
Rectification: you can ask us to correct inaccurate data and complete incomplete data.
Erasure: you can ask us to delete your data if it is no longer needed, if you have withdrawn your consent, or if we processed it unlawfully. We do not delete what the law requires us to keep (such as invoices).
Restriction: you can ask us to stop using your data for a while, for example while we check that it is accurate.
Data portability: you can ask for the data you gave us in a machine-readable format and pass it to another provider.
Objection: you can object to processing based on our legitimate interest. We will then only continue if we have compelling legitimate grounds.
Withdrawing consent: you can do this at any time. It does not affect the lawfulness of processing before you withdrew it.

You can send your request by email (ugyfelszolgalat@perfectpos.hu) or by post to our registered office (1156 Budapest, Szilas park 10. fszt. 1.). We will reply within one month at the latest; for complex or numerous requests this may be extended by a further two months, in which case we will let you know within the first month. There is no charge. To make sure we do not disclose your data to the wrong person, we may ask you to prove your identity.

7.Complaints and remedies

If you feel we have breached your rights, please contact us first so that we can put things right. You can also complain to the supervisory authority:

Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: Falk Miksa utca 9–11., 1055 Budapest, Hungary
Postal address: Pf. 9., 1363 Budapest, Hungary
Phone: +36 1 391 1400
Website: naih.hu

You may also go to court. You can bring the claim before the regional court for your place of residence or stay, if you prefer.

8.Final provisions

We update this policy when our processing or the law changes. If we want to use data for a purpose other than the one it was collected for, we will tell you beforehand and, where needed, ask for your consent. The current version is always available on this page.

Open an account

Get paid in moments, with no extra costs

We open your account for you, by phone or in person at our office. Request a quote and one of our team will be in touch.

Open an account

Or give us a call: +36 1 550 7750