Privacy notice

Version 2026-08-27.2

1. Who handles your data

Controller: Maxima Plus Kft.
Full company name: MAXIMA PLUS Informatikai Kereskedelmi és Szolgáltató Korlátolt Felelősségű Társaság
Representative: Németh Ádám
Registered seat: 3000 Hatvan, Papp Malom HRSZ 0369/3
Tax number: 10655285-2-10
EU VAT number: HU10655285
Company registration number: 10-09-035821
Registered by: Registry Court of the Eger Tribunal
Email: info@idolz.org
Phone: +36 30 225 5882

We have not appointed a data protection officer, as our processing does not require one. Write to the address above with any question about your data.

2. Why we handle your data, and on what legal basis

a) Entering the selection process

By submitting your details you ask us to consider your car, or your press accreditation, for one of our events. We use your registration to run that selection and to tell you its outcome.

Legal basis: your consent, given when you register — GDPR 6. cikk (1) a)

b) Urgent contact before and during the event

During an event the organiser can look up your details in this application and reach you immediately: if your car is parked in the wrong place, if damage occurs to or around it, or in any other urgent situation on site. Without this an incident affecting your car could not be dealt with in time.

Legal basis: our legitimate interest in running a safe event, and your own interest in being reachable — GDPR 6. cikk (1) f)

c) Practical information about the event

We send you the information you need in order to attend: your registration status, arrival and entry details, and any urgent change. These are not marketing emails and you cannot be excluded from them while your registration is live.

Legal basis: your consent and our legitimate interest — GDPR 6. cikk (1) a), f)

3. What data we handle

Name, email address, phone number, country
Exhibitors: the details and photographs of the car, and its registration plate
Media partners: your social media profile, a reference link, and a description of your work
Media partners flying a drone: the drone's make, model, serial number and weight, and a postal address
Your registrations, their status and the decision made on them
The emails we sent you and whether they were delivered
The date on which you accepted this notice

We never ask for special categories of data, and you should not send us any. Your password is stored only in an irreversible hashed form and is not visible to us.

4. Who else sees your data

We do not sell your data and we do not pass it to anyone for their own purposes. We use the following processors, each of which acts solely on our instructions:

Supabase — database and account management hosting, within the European Union
Vercel — hosting for the application itself
Brevo (Sendinblue) — sending the emails described above, within the European Union

Your data is stored within the European Economic Area. Should a transfer outside it ever become necessary, it would take place only under the safeguards required by the GDPR.

5. How long we keep it

While your account exists, we keep your profile and your garage — your cars, their photos and your past registrations. Our events run once a year, and the point of an account is that you do not have to enter everything again for each one.
If you stop using the account, we erase it after five years without a login. Five years covers four editions of our events, so a returning exhibitor still finds their garage waiting.
If you delete your account or ask us to erase your data, we remove it without undue delay — you do not have to wait for that five years.
Records of sent emails are kept for one year for proof of delivery, without the content of the message.

6. Your rights

You may at any time ask us to:

tell you what data we hold about you, and give you a copy of it
correct anything that is wrong or out of date
erase your data
restrict what we do with it, or object to our handling of it
hand your data over to you or to someone else in a portable format
withdraw the consent you gave — this does not affect anything we did lawfully before you withdrew it

Write to us at info@idolz.org and we will answer within 30 days. Withdrawing your consent means we can no longer keep you in the selection process, so your live registrations end.

7. If you are unhappy with how we handled it

Please tell us first — most things are fastest to fix directly. You may also complain to the supervisory authority, or go to court:

Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11.
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu

8. Storage in your browser

We use no advertising or analytics cookies and we do not track you. Your browser stores only what is needed for the site to work: your login session, and your language and appearance settings. These disappear when you log out or clear your browser data.

9. Changes to this notice

If we materially change how we handle your data, we publish a new version here and ask for your acceptance again. The version you accepted is recorded with your account.