Privacy Policy

Introduction

The service provider / data controller processes the personal data of persons registered on the website in the course of operating the website, for the purpose of providing them with the appropriate service.

The service provider aims to fully comply with the statutory requirements on the processing of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council.

This privacy notice has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, having regard to Act CXII of 2011 on Informational Self-Determination and Freedom of Information.

Details of the service provider / data controller:

Contact details of the data controller:

Definitions

• the GDPR (General Data Protection Regulation) is the European Union’s data protection regulation;
• processing: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
• processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
• personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
• controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
• consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them;
• personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
• recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
• third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Principles of data processing

The data controller declares that it processes personal data in accordance with this privacy notice and complies with the requirements of the applicable legislation, with particular regard to the following:

Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.

Personal data shall be collected only for specified, explicit and legitimate purposes.

The purpose of processing personal data shall be adequate and relevant, and limited to what is necessary.

Personal data shall be accurate and, where necessary, kept up to date. Inaccurate personal data shall be erased without delay.

Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary. Personal data may be stored for longer periods only if it will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.

Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

The principles of data protection shall apply to any information concerning an identified or identifiable natural person.

Important information about the processing

The purpose of processing is to allow the service provider / data controller to provide appropriate additional services to persons registered on the website in the course of operating the website.

The legal basis for processing is the consent of the data subject.

The data subjects concerned are the registered users of the website.

Duration of processing and erasure of data. The duration of processing always depends on the specific purpose of the user, but the data must be erased without delay once the originally intended purpose has been achieved. The data subject may withdraw their consent to processing at any time by letter sent to the contact e-mail address. Provided there is no legal obstacle to erasure, the data will be deleted.

Only the data controller and its employees are entitled to access the data.

The data subject may request from the controller access to, rectification, erasure or restriction of processing of personal data concerning them, and may object to such processing, as well as exercise their right to data portability.

The data subject may withdraw their consent to processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

The data subject has the right to lodge a complaint with the supervisory authority.

If the data subject wishes to make use of the benefits offered by registration, i.e. wishes to use this service of the website, the requested personal data must be provided. The data subject is not obliged to provide personal data; failure to do so entails no adverse consequences for them. However, some functions of the website are not available without registration.

The data subject has the right to have the controller rectify or complete inaccurate personal data concerning them, without undue delay, at their request.

The data subject has the right to have the controller erase inaccurate personal data concerning them without undue delay, at their request, and the controller is obliged to erase personal data concerning the data subject without undue delay if there is no other legal basis for the processing.

The modification or erasure of personal data may be requested by e-mail, telephone or letter using the contact details given above.

Registration on the website

The purpose of processing is to provide additional services and to establish contact.

The legal basis for the registration-related processing is your consent.

The data subjects concerned are the registered users of the website.

Duration of processing. Processing takes place until consent is withdrawn. You may withdraw your consent to processing at any time by letter sent to the contact e-mail address.

The data will be erased upon withdrawal of consent to processing. You may withdraw your consent to processing at any time by letter sent to the contact e-mail address.

Only the data controller and its employees are entitled to access the data.

Method of data storage: electronic.

The modification or erasure of personal data may be requested by e-mail, telephone or letter using the contact details given above.

Providing personal data is strictly necessary for identification in the databases and for maintaining contact. The exact company name and address are required for invoicing, which is a statutory obligation.

The user may give consent to the processing by deliberately ticking the empty checkbox provided for this purpose on the website.

You, as the data subject, may object to the processing of your personal data; in this regard you are entitled to proceed in accordance with the data processing information detailed above, this notice, and the legislation referred to in this notice.

Placing an order

The purpose of processing is to provide additional services, establish contact, and send a confirmation e-mail. We can only fulfil your order if you provide your contact and billing details, which are strictly necessary for maintaining contact and invoicing.

The legal basis for processing is your consent. In the case of invoicing, the processing is based on a statutory requirement.

The data subjects concerned are the registered users of the website.

Duration of processing. Processing takes place pursuant to a statutory requirement, or until consent is withdrawn. You may withdraw your consent to processing at any time by letter sent to the contact e-mail address.

The data will be erased upon withdrawal of consent to processing. You may withdraw your consent to processing at any time by letter sent to the contact e-mail address. Billing data may only be erased in accordance with statutory requirements.

Only the data controller and its employees are entitled to access the data.

Method of data storage: electronic.

The modification or erasure of personal data may be requested by e-mail, telephone or letter using the contact details given above.

The user may give consent to the processing by deliberately ticking the empty checkbox provided for this purpose on the website.

The data subject may object to the processing of their personal data; in this regard they are entitled to proceed in accordance with the data processing information detailed above, this notice, and the legislation referred to in this notice.

Issuing invoices

The purpose of processing is to issue and send an electronic invoice as an e-mail attachment.

The legal basis for processing is mandatory processing required by law.

The data subjects concerned are the service provider’s customers.

Duration of processing. Processing takes place pursuant to a statutory requirement, or until consent is withdrawn. You may withdraw your consent to processing at any time by letter sent to the contact e-mail address.

The data will be erased upon withdrawal of consent to processing. You may withdraw your consent to processing at any time by letter sent to the contact e-mail address. Billing data may only be erased in accordance with statutory requirements.

Only the data controller and its employees are entitled to access the data.

Method of data storage: electronic.

The modification or erasure of invoice data may be requested by e-mail, telephone or letter using the contact details given above.

The user may give consent to the processing by deliberately ticking the empty checkbox provided for this purpose on the website.

The data subject may object to the processing of their personal data; in this regard they are entitled to proceed in accordance with the data processing information detailed above, this notice, and the legislation referred to in this notice.

Sending newsletters

As the operator of the website, we declare that we fully comply with the applicable legal provisions when publishing our information and materials. We further declare that, when someone subscribes to the newsletter, we are not in a position to verify the authenticity of the contact details provided, nor to determine whether the data provided relate to a private individual or a business. Businesses that contact us are treated as customer partners.

The purpose of processing is to send professional information, advertising electronic messages, information and newsletters, from which you may unsubscribe at any time without any consequences. You may also unsubscribe without any consequences if your business has since ceased to exist, if you have left the business, or if someone else provided us with your contact details.

The legal basis for processing is your consent. Please note that the user may give prior and express consent to being contacted by the service provider with promotional offers, information and other mailings at the e-mail address provided at registration. As a result, the user may consent to the service provider processing the necessary personal data for this purpose.

Please note that if you wish to receive our newsletter, you are required to provide the necessary data. If you do not provide this data, we will not be able to send you a newsletter.

Duration of processing. Processing takes place until consent is withdrawn. You may withdraw your consent to processing at any time by letter sent to the contact e-mail address.

The data will be erased upon withdrawal of consent to processing. You may withdraw your consent to processing at any time by letter sent to the contact e-mail address.

Consent may also be withdrawn via the link included in the newsletters sent.

Only the data controller and its employees are entitled to access the data.

Method of data storage: electronic.

The modification or erasure of data may be requested by e-mail, telephone or letter using the contact details given above.

Please note that neither the username nor the e-mail address needs to contain any data that identifies you personally. For example, the username or e-mail address does not need to contain your name. You are completely free to decide whether to provide a username or e-mail address that reveals information about your identity. The e-mail address — which serves for maintaining contact — is strictly necessary so that the newsletter or professional information sent to you reaches its destination.

Cookies

Cookies are placed on the user’s computer by the websites visited and contain information such as the site’s settings or login status.

Cookies are therefore small files created by the websites visited. They improve the user experience by saving browsing data. Cookies allow the website to remember site settings and offer locally relevant content.

The service provider’s website sends a small file (cookie) to the computer of website visitors so that the fact and time of the visit can be determined. The service provider informs website visitors about this.

The data subjects concerned are the visitors to the website.

The purpose of processing is to provide additional services, identification, and to track visitors.

Legal basis for processing. The user’s consent is not required where the use of cookies is strictly necessary for the service provider.

Scope of data: unique identifier, timestamp, setting data.

The user has the option, in the cookie settings menu, to individually allow or block cookies, to change their settings at any time, and to delete cookie files from their device at any time.

Only the data controller is entitled to access the data. The data controller does not process personal data through the use of cookies.

Method of data storage: electronic.

Social media pages

A social media page is a medium through which a message is disseminated among social media users. Social media uses the internet and online publishing options to enable users to become content creators rather than mere content consumers.

Social media is an interface of internet applications on which user-generated content is found, such as Facebook, Google+, Twitter, etc.

Forms of appearance on social media may include public statements, presentations, demonstrations, and descriptions of products or services.

Forms of information appearing on social media may include forum posts, blog posts, images, video and audio material, message walls, e-mail messages, etc.

Accordingly, the data processed may, beyond personal data, also include the user’s public profile picture.

The data subjects concerned: all registered users.

The purpose of data collection is to promote the website or the associated web page.

The legal basis for processing is the voluntary consent of the data subject.

Duration of processing: in accordance with the rules published on the given social media page.

Data retention period: in accordance with the rules published on the given social media page.

Persons entitled to access the data: in accordance with the rules published on the given social media page.

Rights relating to the processing: in accordance with the rules published on the given social media page.

Method of data storage: electronic.

It is important to bear in mind that when a user uploads or submits any personal data, they grant a worldwide licence to the operator of the social media page to store and use such content. It is therefore very important to make sure that the user has full authority to publish the information concerned.

Google Analytics

Our website x uses □ does not use Google Analytics

If Google Analytics is used:

Google Analytics compiles reports for its clients on the behaviour of website users based on its own internal cookies.

On behalf of the website operator, Google uses the information to

evaluate how users use the website. As an additional service, it prepares reports on website activity for the website operator so that further services can be provided.

Google’s servers store the data in an encrypted format to make it more difficult to misuse and to prevent misuse of the data.

Google Analytics can be disabled as described below. Quote from the page:

Website users who do not want the Google Analytics JavaScript to report on their data can install the Google Analytics opt-out browser add-on. The add-on instructs the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) not to send information to Google Analytics. The browser add-on works in most modern browsers. The Google Analytics opt-out browser add-on does not prevent data from being sent to the website itself or to other web analytics services.

https://support.google.com/analytics/answer/6004245?hl=en

Google’s privacy policy: https://policies.google.com/privacy?hl=en

Detailed information on the use and protection of data is available at the links above.

Data protection in detail:

https://static.googleusercontent.com/media/www.google.com/en/intl/en/policies/privacy/google_privacy_policy_en.pdf

Data processors

Hosting provider:

The data you provide are stored on the server operated by the hosting provider. Only our staff and the staff operating the server have access to the data, and all of them are responsible for the secure handling of the data.

Description of activity: hosting services, server services.

Purpose of processing: to ensure the operation of the website.

Data processed: the personal data provided by the data subject.

Duration of processing and data retention deadline. Processing lasts until the website ceases to operate, or in accordance with the contractual agreement between the website operator and the hosting provider. The data subject may, if necessary, also request the erasure of their data by contacting the hosting provider directly.

The legal basis for processing is the consent of the data subject, or processing based on a statutory provision.

Rights relating to the processing

Right to request information

Using the contact details provided, you may request information from us on which of your data our company processes, on what legal basis, for what purpose, from what source, and for how long. We will send you information to the e-mail address you have provided without delay, but no later than within 30 days of your request.

Right to rectification

Using the contact details provided, you may request that we correct any of your data. We will arrange this without delay, but no later than within 30 days of your request, and we will send information to the e-mail address you have provided.

Right to erasure

Using the contact details provided, you may request that we erase your data. We will do so at your request without delay, but no later than within 30 days, and we will send information to the e-mail address you have provided.

Right to restriction of processing

Using the contact details provided, you may request that we restrict the processing of your data. The restriction lasts as long as the reason you indicate makes the storage of the data necessary. We will do so at your request without delay, but no later than within 30 days, and we will send information to the e-mail address you have provided.

Right to object

Using the contact details provided, you may object to the processing. We will examine the objection within the shortest possible time from the submission of the request, but no later than within 15 days, decide on its merits, and inform you of our decision by e-mail.

Means of legal redress relating to the processing

If you experience unlawful data processing, please notify our company so that the lawful situation can be restored as soon as possible. We will do everything in our power, in your interest, to resolve the issue described.

If, in your assessment, the lawful situation cannot be restored, please notify the authority at the following contact details:

National Authority for Data Protection and Freedom of Information (NAIH)

Postal address: 1530 Budapest, Pf.: 5., Hungary

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c, Hungary
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat (at) naih.hu
URL: https://naih.hu
Coordinates: N 47°30’56”; E 18°59’57”

Legislation underlying this processing

• REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
• Act CXII of 2011 on Informational Self-Determination and Freedom of Information.
• Act LXVI of 1995 on Public Records, Public Archives and the Protection of Private Archival Material.
• Government Decree 335/2005 (XII. 29.) on the General Requirements for Records Management by Bodies Performing Public Duties.
• Act CVIII of 2001 on certain aspects of electronic commerce services and information society services.
• Act C of 2003 on Electronic Communications.

Effective date: 07/08/2026