Company Name: Behzeva Limited Liability Company (Behzeva Kft.)

​Represented by: Somogyfoki Éva Zsuzsanna, Managing Director

​Tax Identification Number: 32766455-2-07

​Registration Number: 01-10-041043

EU VAT identification number: HU32766455

​Registered Seat: 8000 Székesfehérvár, III. Béla Király tér 3. c. ép. 4. em. 1a. ajtó

​E-mail: company@behzeva.com

​Phone: +3620 964 5645

Website: https://www.behzeva.com/

​Behzeva Kft. (hereinafter: Data Controller) processes personal data strictly in compliance with applicable statutory regulations, specifically Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable national data protection legislation.

​As the Data Controller’s business operations are exclusively focused on Business-to-Business (B2B) trade, international sourcing, and import operations between legal entities and commercial enterprises, the scope of processed data is primarily restricted to contact information of B2B business partners and representatives

​Purpose of Processing: International sourcing, issuing quotations, contract conclusion, sample distribution, logistics coordination, and delivery of products (e.g., safety gloves, textiles).

​Scope of Processed Data: Contact person's name, job title, corporate email address, corporate phone number, company details, delivery/invoicing addresses.

​Legal Basis: Performance of a contract [GDPR Article 6(1)(b)], and the Data Controller’s legitimate business interest in maintaining commercial communications [GDPR Article 6(1)(f)].

​Retention Period: 5 years following the termination of the contractual or business relationship (in accordance with general civil law statute of limitations).

​3.2. Invoicing and Accounting Obligations

​Purpose of Processing: Fulfilling statutory invoicing and book-keeping obligations.

​Scope of Processed Data: Customer/contact name, billing name, address, tax identification number, payment data.

​Legal Basis: Compliance with a legal obligation [GDPR Article 6(1)(c)] pursuant to applicable national accounting laws.

​Retention Period: 8 years as mandated by statutory accounting and tax regulations.

​3.3. Website Contact Forms and Email Inquiries

Purpose of Processing: Responding to B2B business inquiries received via the website or direct email.

​Scope of Processed Data: Name, company name, email address, phone number, message content.

​Legal Basis: Voluntary consent of the data subject [GDPR Article 6(1)(a)], and the legitimate interest of the Data Controller in managing business communications [GDPR Article 6(1)(f)].

​Retention Period: Deleted within 6 months following the resolution of the inquiry or the abandonment of business negotiations.

​The Data Controller does not sell or rent personal data to third parties. However, for operational and international logistics purposes, the following categories of data processors/third parties are engaged:

​Accounting and Tax Advisors: For financial processing and tax compliance (contracted data processors).

​Logistics, Freight, and Customs Clearance Partners: Sea, air, and road carriers, express courier services (e.g., DHL, FedEx), and customs agencies to ensure product delivery and customs compliance.

​IT and Hosting Providers: Operators of website hosting, corporate email servers, and cloud document storage.

​Third-Country (Non-EU) Data Transfers: During international factory sourcing, sample inspection, and logistics management, contact details essential for delivery and execution are shared with international partners (e.g., Pakistani manufacturing partners, export-import officials) pursuant to [GDPR Article 49(1)(b)].

The Data Controller implements appropriate technical and organizational measures to safeguard personal data:

​Electronic data is stored in password-protected systems fortified with firewalls and encryption.

​Access is strictly limited to authorized company representatives and designated data processors.

​Physical documents are secured in locked, unauthorized-proof premises.

Data subjects whose personal data is processed by the company may exercise the following rights at any time using the contact details in Section 1:

​Right of Access: Request information on what personal data is processed, for what purpose, and for how long.

​Right to Rectification: Request correction of inaccurate or outdated personal data.

​Right to Erasure ("Right to be Forgotten"): Request deletion of data (unless retention is required by statutory law, e.g., accounting laws).

​Right to Restriction of Processing: Request limitation of data processing during dispute resolutions.

​Right to Object: Object to data processing based on legitimate interests.

​Right to Withdraw Consent: Where processing is based on consent, it may be withdrawn at any time.

​The Data Controller shall respond and take action within 1 month of receiving a request.

​If a data subject considers that the processing of their personal data infringes GDPR regulations, they have the right to lodge a complaint with the competent national Data Protection Authority (NAIH in Hungary) or seek judicial remedy before the competent ordinary courts

​Behzeva Kft.

Somogyfoki Éva Zsuzsanna, Managing Director