Privacy Policy
Effective: 15 August 2026
This policy explains how the FleetFault service (the website fleetfault.com and its application) processes personal data, in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
1. Data controller
András Kojsza (individual operator)
Location: Budapest, Hungary
Email: info@fleetfault.com
We are not required to appoint a Data Protection Officer and have not done so. For any privacy matter, contact us at the email above.
2. Controller and processor roles
- For the account holder's data (the fleet manager/customer), the operator above is the controller.
- For data entered by the fleet manager (vehicles, fault reports, driver details), the customer is the controller and FleetFault acts as a processor on the customer's instructions.
3. Data we process, purposes and legal bases
| Data | Purpose | Legal basis (Art. 6) | Retention |
|---|---|---|---|
| Email, password (hashed), company name | Account creation, sign-in, providing the service | Performance of a contract (1)(b) | Until account deletion |
| Google account ID and email (Google Sign-In) | Sign in with a Google account | Performance of a contract (1)(b) | Until account deletion |
| Vehicle data (plate, type, model) | Fleet management, identifying reports | On the customer's instructions (processing) | Until deleted by the customer |
| Fault reports: reporter name and phone (optional), description, photo, GPS location, time | Documenting and handling faults | On the customer's instructions (processing) | Until deleted by the customer |
| QR scan log (plate, user agent, time) | Statistics, abuse prevention | Legitimate interest (1)(f) | Up to 12 months |
| Sign-in attempt IP address and time | Security, brute-force protection | Legitimate interest (1)(f) | Up to 24 hours |
| Email log (recipient, subject, time) | Record of sent emails, delivery evidence | Legitimate interest (1)(f) | Up to 12 months |
4. Processors and recipients
- Hosting & email: Hostinger International Ltd. (EU/EEA) – serving the website, database and outgoing email.
- Google Sign-In: Google Ireland Ltd. – only if you choose to sign in with Google.
- Web fonts & flag icons: some pages load resources from Google Fonts (fonts.gstatic.com) and flagcdn.com; your browser's IP address may be transmitted to them.
Where Google services are used, data may be transferred outside the EEA under appropriate safeguards (e.g. the EU Standard Contractual Clauses).
5. Security
Passwords are stored hashed, the site is served over HTTPS, session cookies are set as Secure and HttpOnly, sign-in is rate-limited against abuse, and the admin area can be protected with two-factor authentication (2FA).
6. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, to object to processing based on legitimate interest, and to withdraw consent where processing is based on it. To exercise these rights, contact info@fleetfault.com; we respond without undue delay and within one month.
7. Complaints
You may lodge a complaint with a supervisory authority. Our lead authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa u. 9–11, ugyfelszolgalat@naih.hu, naih.hu. You may also contact the supervisory authority in your country of residence.
8. Changes
We may update this policy. The current version is always available on this page; we will inform users of material changes.