Privacy Notice

Data controller

Six-In-Line Kft.

Registered office

7144 Decs, Erkel utca 9.

Tax number

25724345-2-17

E-mail

szabo.gergely28@indamail.hu

Telephone

+36 70 529 7731

Given the company’s current activities, no data protection officer has been appointed. You can contact the controller directly at the above details with privacy questions.

Data processed

Customer type, name, telephone number, email address, VIN, registration number, selected service, requested day and time for appointments, description of symptoms, work or quotation requested, and optional BMW model and attached photos. The system also records request identifiers, status, technical notification logs, customer responses and timestamps. For alternative appointment proposals, the database stores only a one-way hash of the reply link’s random identifier.

Purpose and legal basis

Receiving and professionally reviewing appointment or quote requests, contacting the customer and preparing the requested service. Legal basis: Article 6(1)(b) GDPR, taking steps at your request before entering into a contract.

Required and optional fields

Both customer types must provide a name, email address, service and description of the work or quote requested. Day and time are required only for appointment requests, not quotes. New customers must also provide a phone number and VIN; registration is optional. Returning customers must provide registration; phone is optional and no VIN is needed. The workshop checks existing customer and vehicle records using name and registration. BMW model and photos are always optional. Email is needed for written acknowledgement, quote replies, appointment confirmation or an alternative proposal. Please do not upload images showing people, identity documents, health data or another vehicle’s registration.

Retention

Requests that do not lead to a service and associated photos are retained for up to 90 days after closure. If a service order results, core data needed for performance and possible legal claims is processed for up to 5 years after completion; unnecessary triage photos are deleted within 12 months. Accounting records and supporting data are retained for the statutory 8 years.

What operates on this interface?

SIL AI is Six-In-Line’s artificial intelligence in trial operation. It is not human and the workshop manager is not replying directly through it. It clarifies the customer’s request and vehicle circumstances, then hands the conversation to the workshop manager if needed.

Data processed

The name, email, phone and VIN provided; any BMW model and registration voluntarily given in earlier enquiries or messages; original conversation messages, timestamps, status, technical identifiers, AI summaries, missing-information lists and reasons for human handover. Only a one-way hash of the random return-link secret is stored.

Purpose, legal basis and AI processing

The purpose is to receive and clarify the enquiry, prepare the appropriate service and communicate with the customer. Legal basis: Article 6(1)(b) GDPR, taking steps at your request before entering into a contract.

To prepare a reply, necessary conversation extracts may be processed by the OpenAI API. Direct contact details and the full VIN are masked where possible before being sent to the AI service. SIL AI has no access to the workshop database, cannot create appointments and cannot modify customer or vehicle records.

The system does not automatically learn from every customer message. Improvements to Six-In-Line’s response style may use only examples separately reviewed and approved by the workshop manager, anonymised where necessary.

Retention and alternatives

Closed conversations that do not lead to a service are retained for up to 90 days. If an appointment or service order results, relevant data follows the retention rules in section 02. SIL AI is optional; you can instead use the appointment form or contact details provided.

Strictly necessary cookies that JavaScript cannot read allow you to securely resume the conversation in this browser. The active-conversation cookie contains no message or secret access key; the server checks access rights on every opening. “Forget on this device” removes local access but does not delete the conversation itself.

To prevent automated or overly frequent submissions, the system creates a one-way hash of the IP address or, if unavailable, a technical browser identifier. The rate-limiting database does not store the original value; the hash and submission events are deleted within 48 hours.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is protecting the website, customer data and workshop operations against abuse and service overload.

You may object at any time for reasons relating to your situation. We will then continue processing only if we have compelling legitimate grounds or it is necessary to establish, exercise or defend legal claims.

With separate permission, we use our own random visitor identifier to compile visitor, session, page and service statistics. Measurement includes traffic sources, predefined UTM campaign codes, transmission-finder use, contact buttons and the steps of appointment or quote requests. A request is counted as successful only when the server has actually stored it; repeated submission does not create another conversion. Analytics contains no name, phone number, email address, VIN, registration number, search text or free-text form content. We do not store full URLs or referrer URLs; only predefined page, source and campaign codes are used. We do not use browser fingerprinting, advertising tracking or third-party analytics code.

Legal basis: your consent under Article 6(1)(a) GDPR. You can refuse consent or withdraw it at any time without disadvantage using “Cookie settings” in the footer. On withdrawal, we delete the identifier cookie and associated analytics records. Detailed events and inactive sessions are retained for 90 days; daily contributions and unique-visitor history for up to 14 calendar months. The consent version, time and withdrawal are retained for as long as necessary to substantiate the associated statistics; on withdrawal, the visitor hash is also removed from the consent evidence. Deletion is part of regular maintenance independent of website visits.

Visits and campaign data before consent are not recorded retrospectively. We request a new choice for detailed measurement instead of relying on permission for the previous counter. If deletion fails, measurement stops in the browser and removal of related records is retried. Withdrawal does not delete business data needed to fulfil appointment and quote requests; separate provisions of this notice apply to that processing.

Only authorised Six-In-Line Kft. staff can access requests through the internal SIL system and protected mobile interface. Phone notifications show only that a new request exists and its identifier, without detailed customer data.

Categories of technical service providers used:

• OpenAI Ireland Limited – web application and hosting services;
• Cloudflare – database, object storage, networking and security infrastructure;
• Resend – delivery of transactional appointment and conversation emails;
• the device operating system’s push provider – solely to deliver technical notifications to authorised workshop devices.

Providers may also process data outside the European Economic Area. Transfers in such cases rely on an adequacy decision, standard contractual clauses or other appropriate GDPR safeguards. Current provider privacy and subprocessor information: OpenAI, OpenAI subprocessors, Cloudflare.

Under the GDPR conditions, you may request access, rectification, erasure or restriction of your personal data; portability for automated processing based on consent or contract; and object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

Send requests to the email or postal address above. We respond without undue delay, normally within one month. We may request information reasonably necessary to verify your identity.

You may complain to Hungary’s National Authority for Data Protection and Freedom of Information: 1055 Budapest, Falk Miksa utca 9–11; postal address: 1363 Budapest, Pf. 9; telephone: +36 1 391 1400; email: ugyfelszolgalat@naih.hu; www.naih.hu. You may also seek a judicial remedy.

The website does not carry out solely automated decision-making or profiling with legal or similarly significant effects. SIL AI provides information only and cannot determine a final diagnosis, price or appointment. An appointment becomes final only after human review and separate confirmation by the workshop.

We update this notice when operations or legislation change. The version currently in force is available on this page with its effective date.