Privacy policy

This notice describes the processing of personal data carried out on the prevotex.hu website and in connection with contacting us through it, in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR). Personal data means any information by which a natural person can be identified directly or indirectly, such as a name, email address, phone number or IP address.

1. Data controller

PREVOTEX Hungary Kft.
Registered office and mailing address: 1117 Budapest, Vegyész utca 19–25., Hungary
Company registration number: 01-09-272179 · Tax number: 12057748-2-43
Represented by: Ádám Laczkó, Managing Director
Email: in**@******ex.hu · Phone: +36 30 343 4433
Website: https://prevotex.hu

PREVOTEX Hungary Kft. is not required to appoint a data protection officer. You can send any questions about data processing to in**@******ex.hu.

2. Contact and quotation requests

Data concerned: name, company name, email address, phone number, subject of the inquiry and any other information provided in the message, as well as the time of submission.
Purpose: responding to the inquiry, preparing a quotation, maintaining contact.
Legal basis: your consent (Article 6(1)(a) GDPR); in the case of a quotation request, steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
Retention period: up to 5 years after the inquiry is closed (the general limitation period); if a contract is concluded, for the period required by accounting legislation.
Providing the data is voluntary, but without it we cannot respond to your inquiry.

Inquiries are recorded in our customer relationship management system (Odoo) so that our staff can track the status of quotation requests and related matters.

3. Spam filtering

Messages sent through the contact form are checked by an automatic spam filter (CleanTalk) on submission. For this purpose, the service analyzes the sender's IP address, email address and the text of the message.
Legal basis: our legitimate interest in protecting the website and our email communication against unsolicited and malicious messages (Article 6(1)(f) GDPR).

4. Server logs

When you visit the website, the hosting provider's server records technical data: the IP address, the time of the visit, the page viewed, and the type of browser and operating system.
Purpose: secure operation of the website, detection of errors and misuse.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Retention period: up to 12 months.

5. Cookies and analytics

In addition to the cookies necessary for its operation, the website uses statistics cookies (Google Analytics, via Google Tag Manager) only with your consent. You can give your consent in the cookie banner at the bottom of the website, and you can change or withdraw it at any time. A detailed list of cookies is available in the Cookie policy.
Legal basis: legitimate interest for necessary cookies; your consent for all other cookies (Article 6(1)(a) GDPR).

6. Embedded videos

The website also displays YouTube videos. These are embedded in privacy-enhanced mode: Google only receives data about your visit if you start the video.

7. Social media

The website contains simple links to our Facebook and LinkedIn pages; these do not transmit any data. Data processing on social media platforms is governed by the rules of the respective platform.

8. Data processors

The data may be accessed only by our staff and by the following contracted data processors, to the extent necessary to perform their tasks:

• Hosting provider: [Hosting provider name, registered office, contact: to be confirmed with YourBrand]
• Microsoft Ireland Operations Ltd. (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland): email and document storage (Microsoft 365)
• Online ERP Hungary Kft. (1145 Budapest, Szugló utca 9–15., Hungary) and Odoo S.A. (Chaussée de Namur 40, 1367 Grand-Rosière, Belgium): customer relationship management and enterprise resource planning system (Odoo)
• Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland): website analytics, Google Tag Manager, YouTube
• Usercentrics A/S (Havnegade 39, 1058 Copenhagen, Denmark): cookie management (Cookiebot)
• CleanTalk: spam filtering

9. Transfers of data outside the EU

When Microsoft and Google services are used, data may also be transferred to the United States. These providers participate in the EU-U.S. Data Privacy Framework and apply the Standard Contractual Clauses (SCCs) adopted by the European Commission.

10. Data security

Data is stored in password-protected systems with individual user access. The website is accessible via an encrypted (HTTPS) connection and is protected by regular backups and a firewall.

11. Your rights

At any time, you may:
• request information about what personal data we process about you and a copy of it (right of access);
• request the rectification of inaccurate data;
• request the erasure of your data;
• request the restriction of processing;
• request your data in a machine-readable format (right to data portability);
• object to processing based on legitimate interest;
• withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

You can send your request to in**@******ex.hu or by post. We will respond within one month at the latest.

12. Remedies

If you believe that the processing of your data violates the law, please contact us first. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
1055 Budapest, Falk Miksa utca 9–11., Hungary · Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400 · Email: ug*************@**ih.hu · www.naih.hu
If your rights are violated, you may also go to court; you may also bring the action before the regional court (törvényszék) competent for your place of residence.

13. Changes to this notice

We update this notice if the law or our data processing changes. The version currently in force is always available on this page.