1. Controller

Controller: Varga-Tech – Attila Varga, Leipziger Str. 3, 37085 Göttingen, Deutschland, email: vargatech@attila-varga.eu.

2. Processor / technical support

Varga Krisztián Dávid from Hungary may act as processor or technical service provider for development, maintenance and support where system or data access is required.

3. Purpose

CarBook is used to manage vehicles, costs, fuel logs, mileage, trips, services, deadlines and calendar events. Data is stored server-side in a private recovery-code profile.

4. Data processed

Vehicle data, licence plates, mileage, costs, fuel logs, events, deadlines, notes, calendar data, language settings and technical profile data may be stored. Server logs may include IP address, access time, browser/device information, requested URL and server responses.

For abuse prevention, security and technical troubleshooting, CarBook may store shortened pseudonymous hashes of the IP address and browser identifier in the profile. Raw IP addresses are not stored in this profile.

5. Recovery code

The recovery code restores the private profile. Anyone who knows the recovery code can access the related profile. Keep it safe.

6. Cookies/session

CarBook uses technically necessary cookies/session data for private profile, language and app functionality. No marketing cookies or advertising tracking are used.

7. Calendar sync

CarBook can provide an iCalendar/ICS link for deadlines and events. Sync is one-way from CarBook to calendar; calendar changes are not imported back. Keep the calendar link confidential.

8. Currency conversion

Currency conversion may query an external exchange-rate source. Vehicle/profile data is not transmitted; technically the server IP may be processed. Rates may be cached server-side.

9. Legal bases

Processing is performed to provide app functions, for contractual/pre-contractual use, legitimate interests in secure operation and, where required, legal obligations.

10. Retention and deletion

Profile data is stored until deleted by the user/operator or until the application operation ends. Server logs are retained only as required for security, troubleshooting and operation.

11. Recipients

Data may be disclosed only where required for hosting, technical maintenance, legal obligations or user-enabled functions.

12. Rights

Data subjects may have rights of access, rectification, erasure, restriction, portability and objection under GDPR. Requests: vargatech@attila-varga.eu.

13. Complaint

You may complain to a competent data protection supervisory authority, including the authority in Lower Saxony or the Hungarian NAIH where applicable.

14. Version

Version: 2026-09-08. This policy may be updated when functions or legal requirements change.