Privacy Policy

1. Controller

Pupupu Kft., 1055 Budapest, Nyugati tér 9. 3/3, Hungary · Tax no.: 32795255-2-41 · Company reg. no.: 01-09-453852 · info@3-2-1.hu

2. Data we process and why

Data entered in the request and contact forms (name, email, phone, billing address, company name and tax number for businesses, message, rental period and selected equipment) is used to process your request, perform the rental contract, communicate with you and issue invoices. ID and address-card details are recorded in the handover report at pickup to protect the equipment.

3. Legal basis

Performance of a contract (GDPR Art. 6(1)(b)); legal obligation for invoicing data (Art. 6(1)(c), Hungarian Accounting Act); legitimate interest in protecting the equipment and enforcing claims (Art. 6(1)(f)).

4. Retention

Invoices and related data: 8 years (Hungarian Accounting Act §169). Requests that did not lead to a rental: up to 1 year. Other rental-related data: until claims expire (5 years).

5. Processors and transfers

• Vercel Inc. (USA) — website hosting and visitor statistics
• Notion Labs Inc. (USA) — order and booking records
• Resend Inc. (USA) — notification and confirmation emails
• KBOSS.hu Kft. — szamlazz.hu (Hungary) — invoicing
• Rackhost Zrt. (Hungary) — email

Transfers to the USA rely on the EU–US Data Privacy Framework adequacy decision or the European Commission's standard contractual clauses.

6. Cookies and local storage

We use no tracking or marketing cookies. Your cart is stored in your browser's localStorage and never sent to us until you submit a request. Visitor statistics (Vercel Analytics) work without cookies and cannot identify you.

7. Your rights

You may request access, rectification, erasure, restriction, data portability, or object to processing at info@3-2-1.hu; we reply within one month. You may lodge a complaint with the Hungarian data protection authority (NAIH, naih.hu) or go to court.