Privacy Notice

1. Details of the data controller

Company name: PROSPERIO Kft.
Registered office: 1095 Budapest, Soroksári út 48., Building 18, 1st floor, Hungary
Company registration number: 01-09-425877
Tax number: 32471159-2-43
Contact email: info@prosperio.hu
Website: www.prosperio.hu

2. Definitions

For the purposes of this notice, the following terms have the meanings set out in Article 4 of Regulation (EU) 2016/679 (GDPR):

Personal data: any information relating to an identified or identifiable natural person.
Processing: any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure and erasure.
Controller: the person or organisation that determines the purposes and means of processing personal data.
Processor: the person or organisation that processes personal data on behalf of the controller.
Data subject: the natural person to whom the personal data relates.
Consent: the data subject's freely given, specific, informed and unambiguous indication of agreement.
Personal data breach: a breach of security resulting in the accidental or unlawful destruction, loss, alteration or unauthorised disclosure of personal data.

3. Categories of personal data processed

3.1 Contact form

We process the following data submitted through the website's contact form:

Name
Email address
Telephone number
Company name
The content of the message provided by the data subject

3.2 Technical data (Google Analytics)

The website uses Google Analytics to collect visitor statistics. The following data is recorded:

IP address (in anonymised form)
Browser type and version
Pages visited and time spent on them
Source of the visit (e.g. search engine or referring website)
Device type (desktop, mobile or tablet)

The processing of data collected by Google Analytics is governed by Google LLC's privacy policy. Further information: Google Privacy Policy

4. Purposes and legal bases of processing

4.1 Contact form

Purpose: responding to the data subject's enquiry and establishing and maintaining a business relationship.

Legal basis: the data subject's voluntary consent (Article 6(1)(a) GDPR) and the controller's legitimate interest (Article 6(1)(f) GDPR) in maintaining business communications.

Provision of data: providing data is voluntary. However, without this data the controller cannot respond to the enquiry or establish contact.

4.2 Google Analytics

Purpose: measuring website traffic and improving the user experience and content.

Legal basis: the data subject's consent (Article 6(1)(a) GDPR), which may be given through the website's cookie management interface.

5. Data retention periods

Personal data submitted through the contact form is processed until the data subject requests erasure, but for no longer than 5 (five) years after the last contact.

The retention period for data collected by Google Analytics is determined in the Google Analytics settings; the default period is 26 months.

When the retention period expires, or upon a request for erasure, the data is irreversibly deleted.

6. Data transfers and processors

PROSPERIO Kft. does not disclose personal data to third parties, except to the following processors:

Google LLC (Google Analytics)
Wix.com Ltd. (website operation)
Microsoft Ireland Operations Ltd. (Microsoft 365 services)
Authorities acting under a statutory obligation

Transfers to third countries (outside the EU): certain services of Google LLC and Microsoft Corporation may also use infrastructure or subprocessors located in the United States. Transfers are based on the EU–US Data Privacy Framework adopted by the European Commission or, where applicable, the European Commission's Standard Contractual Clauses. Further information: EU–US Data Privacy Framework

7. Rights of data subjects

Under the GDPR, data subjects may exercise the following rights:

Right of access

Data subjects may request information about whether their personal data is being processed and, if so, obtain access to it.

Right to rectification

Data subjects may request the correction of inaccurate or incomplete personal data.

Right to erasure

Data subjects may request the erasure of their personal data where processing is no longer necessary or they withdraw their consent.

Right to restriction of processing

Data subjects may request restriction of processing, for example if they contest the accuracy of the data or object to processing.

Right to data portability

Data subjects may receive the personal data concerning them that they have provided in a machine-readable format.

Right to object

Data subjects may object to processing of their personal data based on legitimate interests.

Right to withdraw consent

Where processing is based on consent, data subjects may withdraw their consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

8. Response deadlines

The controller responds to data subject requests within 30 days of receipt. Where necessary, this period may be extended by a further 2 months. The controller informs the data subject of the extension within 30 days of receiving the request, stating the reasons for the delay.

If the controller takes no action on a request, it informs the data subject of the reasons and available remedies no later than 30 days after receiving the request.

Requests to exercise data subject rights should be sent to info@prosperio.hu.

9. Data security measures

Taking into account the nature, scope and purposes of processing, Prosperio Kft. applies appropriate technical and organisational measures to protect personal data, including:

SSL encryption to protect data transmitted through the website and forms
Password-protected access to systems containing data
Access to personal data restricted according to authorisation
Regular backups

In the event of a personal data breach likely to pose a risk to data subjects' rights and freedoms, the controller notifies the Hungarian National Authority for Data Protection and Freedom of Information without undue delay and no later than 72 hours. Where the risk is high, data subjects are also notified without delay.

10. Cookies

The website uses the following types of cookies:

Necessary (technical) cookies

Cookies essential to the operation of the website. Without them, the website does not function properly. Their legal basis is legitimate interest, and they are placed without consent.

Analytics cookies (Google Analytics)

Cookies used to measure website traffic. Their placement requires the data subject's consent, which may be given or withdrawn at any time through the website's cookie management interface. Data subjects may also delete or block cookies through their browser settings.

11. Remedies

Data subjects may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, P.O. Box 9, Hungary
Website: www.naih.hu
Email: ugyfelszolgalat@naih.hu
Telephone: +36-1-391-1400

Data subjects may also enforce their rights before the competent court.

12. Applicable legislation

This notice was prepared taking into account the following legislation:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information
Act CVIII of 2001 on Electronic Commerce Services
Act XLVIII of 2008 on the Basic Requirements of Commercial Advertising Activities
Act C of 2003 on Electronic Communications

13. Amendments to this notice

PROSPERIO Kft. reserves the right to amend this privacy notice unilaterally. Data subjects are informed of amendments through the website. The amended notice takes effect upon publication.