Privacy Policy

We have reviewed our personal data processing activities in light of the mandatory rules and regulations of the new European Union General Data Protection Regulation (GDPR) and are committed to conducting them in accordance with the requirements set forth therein, as well as in applicable domestic legislation.

Data Controller’s Details and Contact Information

We are committed to protecting the personal data of our website visitors, clients, partners, and all data subjects, and we consider it of utmost importance to respect their right to informational self-determination.

We treat personal data confidentially and take all security, technical, and organizational measures to guarantee the security of personal data.

Should you have any questions that are not clearly addressed in this privacy policy, please contact us using the contact details provided above. We strive to respond to you as quickly as possible, but if a proper response to your question requires more time, we undertake to answer it within a maximum of 15 days.

You may request information regarding the processing of your personal data at any time, either in writing (via email or a letter sent to our postal address) or verbally (by phone). Please note that if you contact us by phone – and your request related to data processing warrants it (e.g., you request the deletion of your data) – we must identify you to confirm your entitlement to the request before fulfilling it. If identification is not possible, we can only provide general information regarding data processing. For this reason, we recommend that you submit your question or request in writing if possible.

Applicable Legislation

We undertake to process personal data in accordance with the currently applicable legal provisions, particularly those listed below:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR: General Data Protection Regulation;
• 2011. Act CXII of 2011 (Infotv.) on the right to informational self-determination and freedom of information.

Complaint Handling and Further Legal Remedies

We do everything in our power to ensure that personal data processing complies with the law. If you feel that we have not met this standard or if you have any questions regarding it, please notify us using the contact details provided above.

In the event of an infringement of your rights regarding the protection of your personal data – if the Data Controller does not cease its infringing conduct despite your notification – you may turn to the National Authority for Data Protection and Freedom of Information, using the contact details below:

Data Processed on the Website

Anyone can view the public content of our website without providing personal data; it is not tied to registration or login.

In connection with visiting and using the website, we process the data listed below for the purpose and duration specified in this policy, and we ensure the enforcement of your data processing rights as follows:

Cookie Management

You can read our cookie management policy here.

Data Processed for Contact Purposes

By filling out the forms on our website, you can request to be contacted or subscribe to our newsletter. The personal data you provide when filling out the form will be used solely for contacting you and will not be transferred to third parties.

Purpose of data processing
To contact interested parties.

Legal basis for data processing
In case of interest or request for information, data processing is based on voluntary consent, in accordance with the EU General Data Protection Regulation (GDPR) and Act CXII of 2011 (Infotv.) on the right to informational self-determination and freedom of information.

Scope of processed data
When sending a message via the message form, we process the following data:

• name,
• email address,
• phone number,
• company name
• company address (postal address).

Duration of data processing
We process your provided personal data for different durations depending on the nature of the contact.

We do not retain it after providing the necessary information, unless a legitimate claim can be enforced regarding the occasional contact; in that case, we may retain it for a maximum of 5 years for verification purposes.

Enforcement of rights
You can request information about the processing of your data at any time using the contact details provided above.

You can also request the rectification of your data at any time if you find that you provided it incorrectly or that we recorded it erroneously or incompletely.

You can also request the deletion of your data, and if there is no legal impediment, we will comply with your request without delay (otherwise, we will inform you of the reason for refusing deletion).

Who Can Access the Data?
Only our employees are authorized to access the data you provide.

Data Processed During Partner Contact

On our website, we provide an opportunity to apply as a designer and reseller partner by filling out the dedicated form.

Purpose of data processing
To contact applicants.

Legal basis for data processing
Data processing is based on voluntary consent, in accordance with the EU General Data Protection Regulation (GDPR) and Act CXII of 2011 (Infotv.) on the right to informational self-determination and freedom of information, and also based on legal provisions, namely Act V of 2013 on the Civil Code, Act CL of 2017 on the Order of Taxation, and Act C of 2000 on Accounting.

Scope of processed data

• name,
• company name,
• registered office,
• email address,
• phone number,
• tax number.

Duration of data processing
We process your data – if you do not enter into a contractual relationship with our company – until the withdrawal of your consent. The retention period for contracts and related financial documents (e.g., invoices) is a maximum of 8 years to ensure tax self-assessment. After this period, we delete, scrap, and destroy the documents.

Enforcement of rights
You can request information about the processing of your data from us at any time using the contact details provided above.

You can also request the rectification of your data at any time if you find that you provided it incorrectly or that we recorded it erroneously or incompletely.

You can request the deletion of your data at any time, and if there is no legal impediment, we will comply with your request without delay (otherwise, we will inform you of the reason for refusing deletion), thereby ensuring your rights to the deletion and erasure of your personal data.

Data transfer:
Financial documents (invoices) related to the performance of the contract are transferred to our contracted partner providing accounting services for data processing purposes. Data appearing on the invoices is also forwarded to the National Tax and Customs Administration to fulfill a legal obligation.

Who Can Access the Data?
Only our employees are authorized to access the email address and phone number provided during registration.

Data Processing

No third party performs data processing activities with the collected personal data.

Security of Data Processing

To ensure the security of the personal data we process, we take all technical and organizational measures necessary to protect the data against accidental deletion (destruction), unauthorized use, or modification. Access to data processed in our IT systems is granted exclusively to our employees through an authorization system.

With the above, we ensure that unauthorized persons cannot access, disclose, transfer, modify, or delete the processed data.

Data Transfer

We do not transfer your personal data to those not authorized to access it. We only transfer it to third parties if you have given your prior consent. An exception to this is if the transfer of data is mandatory for us by law. During a possible official investigation, upon the official request of the acting authority (e.g., police, prosecutor’s office, court, etc.), we are obliged to hand over the data necessary for the purpose of the request. Your separate consent is not required for this, as it is our task defined by law.

Review and Availability of the Privacy Policy

We reserve the right to review and modify this policy as necessary, which may be justified by changes in relevant legislation, our data processing activities, or the technology applied thereto. If the modification affects your personal data processed based on your voluntary consent, we will inform you without delay and suspend further processing of your personal data until you consent to it again.

The currently effective Privacy Policy is always available here, publicly published on the www.beks.hu website.