Privacy policy

1. The data controller

The details of the controller of personal data are contained in the Imprint. In short:

• Data controller: InForge Labs Informatikai Szolgáltató Zrt.
• Contact: info@inforgelabs.hu
• Hosting provider: Tárhely.Eu Szolgáltató Kft.

2. Data processing principles

InForge Labs Zrt. processes personal data exclusively on lawful grounds, for specific purposes, and to the minimum extent necessary. Our data processing complies with the following regulations:

• EU Regulation 2016/679 (GDPR)
• Hungarian Act CXII of 2011 on the right to informational self-determination and freedom of information (Infotv.)

Specifically:

• Lawfulness: every processing activity has an appropriate legal basis (consent, performance of a contract, legitimate interest, or legal obligation).
• Purpose limitation: we use the data only for the predefined purposes.
• Data minimisation: we only process data strictly necessary for the purpose.
• Accuracy: we keep the data accurate and up-to-date.
• Security: we protect the data with technical and organisational measures.

3. What data we process

Contact via the website

When you fill in the contact form on our website, we process the following data:

Data	Purpose	Legal basis	Retention
Name	Identifying the enquiry, responding	Consent (GDPR Art. 6(1)(a))	2 years
E-mail	Responding to the enquiry	Consent	2 years
Phone number (optional)	Responding to the enquiry	Consent	2 years
Company name	Context of business enquiry	Consent	2 years
Message content	Processing the enquiry	Consent	2 years

Career applications

If you submit a career application, in addition to the above we also process your CV and its content. Further details on processing the application will be communicated after the application is received.

4. Cookies

Our website uses the following cookie categories:

Strictly necessary cookies

These cookies are required for the basic functioning of the website (e.g. storing the cookie consent). They cannot be turned off.

Statistical cookies

They collect information anonymously about how you use the website — for example, which pages are most popular, or how visitors arrived. We only use these with your consent.

5. Third parties

We may transfer data to the following third parties — strictly to the extent necessary to operate the service:

Recipient	Data scope	Purpose
Tárhely.Eu Szolgáltató Kft. (company reg. no.: 01-09-909968), Hungary	Website logs, technical data	Hosting service (the hosting servers are located in Hungary, within the EEA)
Pixel & Process UG (Formspring), Germany	Contact form data (name, email, company, phone, message, consent)	Processing and delivery of contact form submissions
Accounting partner	Invoicing data	Contractual obligation, legal obligation
Authorities	Within the scope defined by law	Legal obligation

We do not transfer data outside the European Economic Area (EEA). The Formspring service (operated by Pixel & Process UG) that processes contact form submissions is likewise hosted within the EEA, in Germany.

6. Retention period

We retain personal data only as long as necessary for the purpose of processing, or as required by law:

• Contact data: 2 years from the date of enquiry, except where a business relationship is established — in which case for the duration of the contract plus the statutory retention period.
• Career applications: 1 year from the date of application, except where the application enters a further process.
• Invoicing data: 8 years (Hungarian Accounting Act C of 2000).
• Cookie consent: 12 months.

7. Your rights

Under the GDPR, you have the following rights regarding data processing:

Right	What it means
Access	You can request information about what data we process about you, and request a copy.
Rectification	You can request the correction of inaccurate data or the completion of incomplete data.
Erasure	You can request the deletion of your data (except where law prohibits this).
Restriction	You can request restriction of processing — e.g. while a dispute about the accuracy of the data is ongoing.
Objection	You can object to processing based on legitimate interest.
Data portability	You can request your data to be provided in a structured, machine-readable format.
Withdrawal of consent	For consent-based processing, you can withdraw your consent at any time.

You can exercise your rights via the contacts below. We respond to your enquiry without undue delay, and at the latest within 30 days.

Right to lodge a complaint with the supervisory authority

For data processing matters, you have the right to lodge a complaint with the supervisory authority:

• Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
• Address: 1055 Budapest, Falk Miksa utca 9-11.
• E-mail: ugyfelszolgalat@naih.hu
• Phone: +36 1 391 1400
• Website: naih.hu

8. Contact for data processing matters

For data processing matters, you can contact us at:

• E-mail: adatvedelem@inforgelabs.hu
• Postal address: Our registered office as defined in the Imprint