Privacy Policy.

1. Introduction

Automating.hu, hereinafter referred to as the "Data Controller," "We," "Us," or "Our," is committed to protecting your personal data. This Privacy Policy provides information on what personal data we collect when you visit and use our website https://automating.hu, how we use, store and protect such data, and what rights you have in relation to your data.

Data processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the GDPR), Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (the "Info Act"), and other applicable Hungarian legislation.

2. Details of the Data Controller

Data Protection Officer (DPO)

No Data Protection Officer has been appointed.

3. Interpretation and Definitions

• Personal data: Any information relating to an identified or identifiable natural person.
• Data processing: Any operation performed on personal data, such as collection, storage, modification, transfer, deletion, etc.
• Data Controller: The business named in this policy, which determines the purposes and means of data processing.
• Data Processor: A natural or legal person that processes personal data on behalf of the Data Controller.
• Data Subject: Any identified or identifiable natural person whose personal data we process.
• Cookies: Small data files placed and stored on your device by the web browser.
• Consent: The voluntary, specific, informed and unambiguous consent of the data subject to the processing of personal data.
• Data breach: A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

4. Personal Data Collected

4.1. Data Provided Directly by You

We collect the following data when you actively provide it, for example through a contact form or registration:

• Identification data: Full name, username
• Contact details: E-mail address, phone number, postal address
• Account data: Username, password, stored in encrypted form
• Communication data: Correspondence with us, the content of requests and complaints

4.2. Automatically Collected Data

When you visit our website, we automatically record the following technical data:

• IP address and approximate location, up to country/city level
• Browser type and version, operating system
• Pages visited, clicks, duration of visit
• Referring URL
• Cookie identifiers and session identifiers

5. Purposes and Legal Bases of Data Processing

Data processing always has a legal basis under the GDPR.

5.1. Performance of a Contract — Article 6(1)(b) GDPR

• Creating and managing an account and providing access
• Responding to customer service requests

5.2. Legitimate Interest — Article 6(1)(f) GDPR

• Maintaining website security and preventing abuse
• Preparing aggregated statistics and analyses for service development
• Enforcing and defending legal claims

5.3. Consent — Article 6(1)(a) GDPR

• Placing non-essential cookies, for example marketing and analytics cookies

5.4. Compliance with a Legal Obligation — Article 6(1)(c) GDPR

• Fulfilling accounting and tax obligations
• Complying with requests from authorities

6. Data Retention Periods

Personal data is retained only for as long as necessary to achieve the purpose of processing, or as required by law:

• Contact messages: For 1 year from the last contact
• Newsletter subscription data: Until unsubscribing
• Web server logs: For a maximum of 90 days, unless required for investigating a security incident

7. Data Security

In order to protect your data, we apply technical and organisational measures that comply with industry standards, in particular:

• Use of SSL/TLS encryption during data transmission (HTTPS protocol)
• Passwords are stored using one-way encryption (hashing)
• Access control: only authorised employees have access to personal data
• Regular backups and software updates
• In the event of a data breach, compliance with the GDPR's 72-hour notification obligation to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

8. Cookies

Our website uses cookies to improve the user experience and ensure the proper functioning of the website.

8.1. Necessary Cookies

Essential for the basic operation of the website. Legal basis: legitimate interest / performance of a contract. These cookies cannot be disabled.

8.2. Analytics Cookies

Collect anonymous statistical data about the use of the website (e.g. Google Analytics). Legal basis: consent. Your prior consent is required.

8.3. Marketing Cookies

Used to display targeted advertisements (e.g. Facebook Pixel, Google Ads). Legal basis: consent. Your prior consent is required.

8.4. Managing Cookie Settings

You may withdraw your consent to cookies at any time through the cookie management banner or in your browser settings. If necessary cookies are disabled, certain functions of the website may not work properly.

9. Data Sharing and Third Parties

We transfer your personal data to third parties only in the following cases:

• Data Processors: Trusted partners such as our hosting provider (Google Cloud). A valid data processing agreement has been concluded with them.
• Authorities: With competent authorities on the basis of a legal obligation (e.g. court order).
• Business transfer: In the event of a merger, acquisition or sale, data may transfer to the successor organisation. You will be informed in advance.
• With your consent: In any other case, only with your prior, explicit consent.

10. Data Transfers to Third Countries

Some of our service providers may operate servers outside the European Economic Area (EEA). In such cases, we transfer data only if appropriate safeguards are in place, for example an adequacy decision of the European Commission, Standard Contractual Clauses (SCCs), or recognition of the given country's GDPR compliance.

11. Your Rights

11.1. Right of Access — Article 15 GDPR

You have the right to request information on whether we process your personal data, and if so, to receive a copy and related information.

11.2. Right to Rectification — Article 16 GDPR

You may request the immediate correction or completion of inaccurate or incomplete data.

11.3. Right to Erasure ("Right to Be Forgotten") — Article 17 GDPR

If certain conditions are met, you may request the deletion of your data. This right does not apply if processing is necessary for compliance with a legal obligation.

11.4. Right to Restriction of Processing — Article 18 GDPR

You may request restriction of processing, for example if you dispute the accuracy of the data.

11.5. Right to Data Portability — Article 20 GDPR

In the case of automated data processing based on consent or a contract, you have the right to receive your data in a structured, machine-readable format (e.g. JSON or CSV).

11.6. Right to Object — Article 21 GDPR

You may object at any time to processing based on legitimate interest. We will cease processing unless we can demonstrate compelling legitimate grounds.

11.7. Automated Decision-Making — Article 22 GDPR

You have the right not to be subject to a decision based solely on automated processing if it has legal or similarly significant effects.

11.8. Withdrawal of Consent

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.

12. How to Exercise Your Rights

You may submit your request by e-mail: hudacsekbence@automating.hu

We respond within 1 month pursuant to Article 12 of the GDPR. The deadline may be extended by up to 2 months for complex requests. As a general rule, fulfilling requests is free of charge.

13. Complaints and Legal Remedies

If you believe our data processing violates applicable data protection laws, you have the right to lodge a complaint with the supervisory authority:

You also have the right to seek judicial remedy against the Data Controller or Data Processor if you believe that the processing of your personal data violates the provisions of the GDPR.

14. Protection of Minors' Data

Our website is not directed at persons under the age of 16, and we do not knowingly collect personal data from such persons. If we become aware that we have collected data from a child under 16 without parental or legal representative consent, we will delete it without delay.

15. Links to Other Websites

Our website may contain links to other websites. By clicking on these links, you leave our website and we do not accept responsibility for the data processing practices of those websites. We recommend that you also review the privacy policies of any linked websites.

16. Amendment of the Policy

We reserve the right to amend this Privacy Policy at any time. We will inform you of changes through the updated policy published on the website and/or by prior e-mail notification. The date on which the amendment enters into force will be indicated at the top of the policy. Please review the policy regularly.

17. Contact

If you have any questions, requests or comments regarding this Privacy Policy, please contact us:

This Privacy Policy has been prepared in accordance with the GDPR (EU 2016/679) and the provisions of Act CXII of 2011 (the Info Act).