Skip to content

Legal

Privacy notice

I am one person, not a database. There is a single form on this site, and what arrives on it reaches me by email. Below I set out exactly what data I process, why, and for how long.

In force from

1 · The controller

The controller is the provider whose details appear in the imprint. I am not required to appoint a data protection officer, so please address any question about data processing directly to me.

Name
Neményi Károly egyéni vállalkozó
Registered seat
6721 Szeged, Csongrádi sgt. 1/B. fsz. 4.

2 · What I process, why and for how long

I have four processing operations, and no more. I send no newsletter, I sell no data, and I build no profile of you.

  • Quote request

    Data processed
    Name, company name, phone number, email address, line of business, country, EU VAT number, description of the need.
    Legal basis
    GDPR Article 6(1)(b) — steps taken at your request prior to entering into a contract. Filling in the form is voluntary; the same can be arranged by phone.
    Retention
    One year from sending the quote. If it leads to business, until the end of the business relationship, then until the accounting deadline below.
  • Keeping in touch

    Data processed
    Name, phone number or email address, the content of your enquiry.
    Legal basis
    GDPR Article 6(1)(f) — legitimate interest: to answer the question you put to me and to keep the thread of the conversation.
    Retention
    One year, or as long as the business relationship lasts.
  • Contract and invoicing

    Data processed
    Company name, seat, tax number, name and contact details of the contact person, order and delivery data.
    Legal basis
    GDPR Article 6(1)(b) — performance of the contract, and Article 6(1)(c) — accounting and tax obligations.
    Retention
    Accounting documents are kept for 8 years under Section 169(2) of Hungarian Act C of 2000 on accounting.
  • Running the site

    Data processed
    IP address, time of the request, technical identifiers sent by your browser. For the quote form I hold the time of submission linked to the IP address in server memory for a short period.
    Legal basis
    GDPR Article 6(1)(f) — legitimate interest: secure operation of the site and filtering of bulk, automated form submissions.
    Retention
    Hosting logs for at most 30 days; the abuse-filtering data for a few hours, and it is never written to disk.

3 · Who else sees the data

I do not pass data to third parties for commercial purposes. The providers below act on my instructions as processors, strictly to the extent needed for the purposes above.

  • Hosting and serving the site

    Vercel Inc.

    Seat
    440 N Barranca Ave #4133, Covina, CA 91723, USA
    Transfer
    United States — under the adequacy decision on the EU–US Data Privacy Framework.
  • Forwarding the form content by email

    Resend (Plus Five Five, Inc.)

    Seat
    2261 Market Street #5039, San Francisco, CA 94114, USA
    Transfer
    United States — under the standard contractual clauses adopted by the European Commission and a data processing agreement.
  • The mailbox that receives my mail

    Google Ireland Limited

    Seat
    Gordon House, Barrow Street, Dublin 4, Írország
    Transfer
    Within the European Union.

The manufacturer supplying the goods you order may receive the delivery address and the name of the contact person, as this is needed to perform the contract. It does not receive the data from your quote request.

4 · Cookies

This site uses no analytics, advertising or profiling cookies. I do not measure how you move around the site and I do not follow you to other sites.

A single cookie is placed in your browser: NEXT_LOCALE, which remembers the language you chose so you need not set it again. It is necessary to provide the service, so it asks for no separate consent, and you can delete it at any time in your browser settings.

5 · Your rights

You may exercise the rights below at any time: write or call, and I will answer within one month at the latest.

  • Access

    You may ask whether I process data about you and, if so, what — and request a copy of it. (GDPR Article 15)

  • Rectification

    If I hold incorrect or incomplete data, you may ask for it to be corrected. (GDPR Article 16)

  • Erasure

    You may ask for your data to be erased. What accounting law requires me to keep, I cannot erase — but I will tell you what that is and for how long. (GDPR Article 17)

  • Restriction

    Where data is disputed, you may ask me not to use it until the matter is settled. (GDPR Article 18)

  • Portability

    You may request the data you provided in a machine-readable format. (GDPR Article 20)

  • Objection

    You may object to processing based on legitimate interest; I will then continue only if I can demonstrate compelling legitimate grounds. (GDPR Article 21)

Send your request to the email address or phone number in the imprint. If your identity is unclear, we will clarify it first — I must not hand data to the wrong person.

6 · Remedies

If you believe I process your data unlawfully, please contact me first — most things can be settled in one phone call. Regardless of that, you may lodge a complaint with the supervisory authority or go to court.

You may also bring proceedings before the court competent for your place of residence or stay.

Authority
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address
Falk Miksa utca 9–11, 1055 Budapest, Hungary

7 · Data security

The site is served over an encrypted connection (HTTPS). I keep no customer database: form data is not written to a database but arrives by email in my mailbox, which is protected by two-factor authentication.

Submitted personal data never reaches the server logs. On error only a reference number is logged, from which no data can be reconstructed.

8 · Automated decision-making

I make no automated decisions and carry out no profiling. Quotes are written by a person: me.

9 · Changes to this notice

I amend this notice when needed — for example if I engage a new provider. The version in force is always available on this page, with its date at the top.

Imprint

Provider details, hosting provider, complaints.