Privacy policy

1. Data controller

GSS Group Hungary Kft.

Registered seat: Petőfi Sándor u. 48., 2724 Újlengyel, Hungary

Office: Pólus Office Building, Szentmihályi út 137. 3/304, 1152 Budapest, Hungary

Company registration no.: 13-09-158191. Tax no.: 23425916-2-13.

Email: office@gssgroup.hu. Phone: +36 (70) 604-8800.

2. Data processors

Hosting provider: ATW Internet Kft., Esztergomi út 66. fszt. 1., 1138 Budapest, Hungary, sales@atw.co.hu. The website and the messages sent through its forms are stored on their servers.

Form message delivery: Google Ireland Limited (Google Workspace email), Gordon House, Barrow Street, Dublin 4, Ireland. This service delivers the messages sent through the forms to us.

Accounting: [accountant’s name and address]. They have access to the data on our invoices.

Processors may only handle the data under their contract with us and on our instructions.

3. Legal framework

Processing is governed by the EU General Data Protection Regulation (GDPR, (EU) 2016/679) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.).

4. Principles

We process only the data a specific purpose requires, and only for as long as that purpose lasts. We keep the data accurate, limit access to the staff who need it for their work, and protect it with passwords, anti-virus and firewall protection, and regular backups.

5. Contact form

Purpose: answering your enquiry and preparing a quote or a demo.

Legal basis: your consent (GDPR Art. 6(1)(a)), given by ticking the box on the form. You can withdraw it at any time; this does not affect processing carried out before the withdrawal.

Data: name, company (optional), email address, the business line you are interested in, and your message.

Access: the staff who handle enquiries and the contact person of the business line concerned.

Retention: 30 days after our reply, unless the enquiry leads to a contract. In that case the rules for business partners apply.

Transfer: only to the hosting provider and the message delivery provider named above, as processors.

6. Contacting us by email or phone

If you email or call us, we use your name, your email address or phone number and the content of your enquiry to reply. Legal basis: your consent, given by contacting us.

Phone numbers are removed from the call list after the call; emails are kept for 30 days after our reply, unless a contract follows.

7. Business partners and contact persons

Purpose: preparing and performing contracts, keeping in touch, handling warranty claims.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)); for the partner’s contact persons, legitimate interest (GDPR Art. 6(1)(f)).

Data: the partner’s name, registered seat, company registration and tax numbers; the contact person’s name, email address and phone number.

Retention: 5 years after the contract ends.

8. Invoicing

Purpose: issuing invoices and other accounting documents.

Legal basis: performance of a contract and legal obligation (GDPR Art. 6(1)(b) and (c)), under Hungarian Act CXXVII of 2007 on VAT and Act C of 2000 on accounting.

Data: the details an invoice must contain (name, address, tax number, details of the service).

Retention: 8 years, as required by the accounting act. Invoices are also passed to our accountant.

9. Cookies and local storage

This website uses no tracking, analytics or marketing cookies and stores nothing in your browser’s local storage. If that changes, we will update this policy first and ask for your consent to the cookies concerned.

10. Your rights

You can ask which of your data we process (access). You can ask us to correct or erase your data or restrict its processing, ask for the data you gave us in a machine-readable format (portability), and object to processing based on legitimate interest.

We reply within 25 days at the latest. The first copy of your data is free of charge.

11. How to submit a request

In writing, to office@gssgroup.hu or by post to our registered seat (Petőfi Sándor u. 48., 2724 Újlengyel, Hungary). If we have doubts about the requester’s identity, we may ask for additional information to confirm it.

12. Remedies

You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): Falk Miksa utca 9–11., 1055 Budapest; postal address: 1363 Budapest, Pf. 9.; email: ugyfelszolgalat@naih.hu; phone: +36 1 391 1400; www.naih.hu.

You can also go to court if your rights are infringed; you may bring the case before the regional court of your place of residence or stay.

13. Personal data breaches

If a breach puts data subjects at risk, we report it to NAIH within 72 hours. If the risk is high, we also notify the people affected without undue delay. We keep a record of all breaches.

14. Changes to this policy

We update this policy when the law or our processing changes. The current version is always available on this page. Effective from: [date].