Privacy

1. The data controller

The operator of bestlock.hu and the data controller:

Name of the controller

FlyR Reklámműhely Kft.

Brand name

BestLock

Registered office

Szarkahegy utca 26, 3534 Miskolc, Hungary

Postal address

Győri kapu 147, 3532 Miskolc, Hungary

E-mail

okoszar@gmail.com

Phone

+36 20 347 9629

VAT number

24971939-2-05

We are not required to appoint a data protection officer and have not appointed one. We answer data protection questions at the e-mail address above.

2. What data we process

We only ask for what a quote and an installation need. There is no registration and no user account is created.

Quote request (website, e-mail, phone)

Name, e-mail address, phone number, the installation address or postcode, photos of the door, the technical details you give (door type, existing lock, opening direction) and the text of your message.

Contact form

Name, e-mail address, phone number (optional) and the text of your message. The form opens your own e-mail client – the website stores and transmits nothing.

Order and installation

In addition to the above: the appointment date, details of the fitted devices and the information needed for the warranty.

Invoicing

Name or company name, billing address, VAT number (for companies), details of performance.

The TTLock account for your lock, your codes, fingerprints and entry log live on your device and in the TTLock system – we do not access them after the installation is finished, and we do not process them.

4. How long we keep it

The quote we sent you (name, contact details, the address of the fitting, the technical details you gave and your message)

2 years – so that we can look up what we quoted, and at what price, if you come back to us. The system deletes it automatically once that period is over.

Door photos

Kept only in the e-mail thread of your quote request, for up to 12 months. Until the notification e-mail to us goes out they wait in Cloudflare storage – for 24 hours at most – and are deleted from there afterwards.

Installation and warranty records

Until the warranty expires, i.e. 2 years from the fitting, plus any period needed to settle a claim.

Invoices and accounting documents

8 years – required by the accounting act; withdrawing consent cannot shorten this.

Once the purpose is fulfilled and no law requires otherwise, we delete the data without delay. If you withdraw your consent we delete it before the periods above run out – an e-mail is enough.

5. Who has access

The data is seen by the controller and by the colleagues carrying out the installation, only to the extent their work requires. We do not sell data and we do not pass it on for marketing.

Our processors: the hosting and infrastructure provider (Cloudflare, Inc., USA – serving the site, processing the quote form and storing the quotes we send), the bookkeeping business ([to be completed]), the e-mail delivery provider (Resend, Inc., USA – sending the quotes and the notifications), the provider behind Zárbarát, the AI chat (OpenRouter, Inc., USA – see section 7) and the e-mail provider (Google LLC – provider of the contact mailbox). On a lawful official request we hand over the data the law requires.

The details you give when requesting a quote are stored on the Cloudflare network, which can involve a transfer outside the EU. Cloudflare relies on its certification under the EU–US Data Privacy Framework and on the Standard Contractual Clauses (SCCs) approved by the European Commission for this. Any transfer by the e-mail provider rests on the same basis. Beyond that – the chat aside, see section 7 – we do not transfer data outside the EU on our own.

6. Cookies and analytics

We currently use no tracking cookies and no analytics service (such as Google Analytics).

The website stores three things in your browser, all of them only on your own device. One: your dark/light theme choice (localStorage, key “theme”). Two: the configuration you left unfinished in the quote form (localStorage, key “bl-quote-draft”) – door type, chosen lock, quantities, extras, plus the postcode and town; your name, e-mail address, phone number, note and photos are never stored this way. That draft deletes itself after seven days, or when you send the quote. Three: if you chat with Zárbarát, the conversation’s id and the messages shown on the page (sessionStorage, key “bl-chat”), so that a reload does not lose them – this is cleared when you close the browser tab. None of the stored data leaves your device, and clearing your browser data removes all of it.

Fonts are served from our own domain, so loading them sends no request to a third party. We use no embedded map. The installation video page loads Facebook’s embedded player (Meta Platforms Ireland Ltd.), so opening that page sends a request to Facebook (IP address, browser data, any Facebook cookies). No other page of ours loads Facebook content.

7. Zárbarát, the AI chat

In the bottom-right corner of the site, Zárbarát, BestLock's AI-powered assistant, answers questions about smart locks and their installation. It is not a person: its answers are written by a language model, so it can be wrong. You do not need to register to chat, no user account is created, and Zárbarát never sends a quote request on your behalf – at most it takes you to the quote form, filled in in advance.

Data processed

Your messages and Zárbarát’s answers, the path of the page you wrote from (for example /en/locks/) and the time of the messages. Please do not type personal data (name, phone number, address) into the chat – for an actual quote use the quote form, or call us.

Purpose

Answering your questions, and improving the service: we read through the conversations to see where Zárbarát gets things wrong or what it does not know yet.

Legal basis

[to be completed – for example legitimate interest, GDPR Art. 6(1)(f)]

Processor

OpenRouter, Inc. (USA): passes the messages on to the provider of the language model that writes the answer. We have set it to route only to model providers that do not train their models on the data sent to them. [Safeguard for the transfer outside the EU: to be completed.]

Retention

90 days – after that the system deletes the conversation automatically. To count the daily message limit, we store a salted hash of your IP address (not the address itself) for 7 days; after that it is deleted automatically.

Deletion on request

To have it deleted sooner, write to okoszar@gmail.com and tell us roughly when and what you chatted about – with no account, that is how we find it.

8. Your rights

Access

You can ask what data of yours we process and receive a copy of it.

Rectification

You can ask us to correct inaccurate data or complete incomplete data.

Erasure

You can ask us to delete your data where no other legal basis applies (invoice data must be kept by law).

Restriction

You can ask us to restrict processing, for example while we verify accuracy.

Objection

You can object to the processing of your data.

Portability

You can ask for the data you provided in a machine-readable format.

Withdrawing consent

You can withdraw consent at any time. This does not affect the lawfulness of processing before the withdrawal.

Send requests to okoszar@gmail.com, call +36 20 347 9629, or write to Győri kapu 147, 3532 Miskolc, Hungary. We answer without undue delay, at the latest within 30 days.

9. Complaints and remedies

If you believe we process your data unlawfully, write to us first – most questions are settled fastest that way. You may also complain to the supervisory authority:

Authority

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Address

Falk Miksa utca 9–11, 1055 Budapest, Hungary

Postal address

1363 Budapest, Pf. 9, Hungary

Phone

+36 1 391 1400

E-mail

ugyfelszolgalat@naih.hu

Website

naih.hu

You may also go to court if your rights are infringed. Proceedings may be started before the county court of your place of residence.

10. Changes to this notice

We update this notice when needed – for example when we launch a new service. The version in force is always on this page, together with the date it was updated.