Privacy Policy

I do not engage in any activity that would justify the use of a Data Protection Officer.

The purpose of this notice is to enable visitors to this website and my future partners to understand in a transparent and clear way what personal data I process and on what basis I do so.

The contact form on this website is intended to provide you with the possibility to contact us online. Please enter your name and email address in the form. I process this data on the basis of consent.

If you order any of my services, we will enter into a contract and I will issue an invoice for the work performed, as required by law, and I will ask you for your billing name and address and the email address at which we will agree the details (which I usually have earlier in the contact).

If you order modification work or maintenance for an existing website, I may also have access to other personal data (e.g. webshop order data, comments on other blogs). In all cases, I will have access to this data on the basis of a contractual mandate.

I will see your phone number when you call the phone number on the website. You will probably introduce yourself, so I will know your name. The former is essential, I will not accept calls from an unknown number. I will process this data on the basis of your consent, so that I can call you back if I am unable to answer the phone. If we do not have a business relationship, I will not save the phone number and associated name.

A cookie is a set of letters and numbers that websites usually send to your browser to save certain settings, make the website easier to use and help us collect some relevant, statistical information about visitors. Cookies do not contain any personal information and are not used to identify an individual user. Cookies often contain a unique identifier - a secret, randomly generated sequence of numbers - that is stored on your device. Some cookies are deleted after you close the website, and some are stored on your computer for a longer period of time.

You can prevent all cookie-related activity, delete data files placed during your previous visits, and find out exactly how to do this in your browser's instructions, which can be found on the following pages:

• Google Chrome

• Mozilla Firefox

• Internet Explorer and Edge

When you download certain parts of this website, the visit analysis software I use (Google Analytics, operated by Google Inc. ("Google")) automatically places small data files on your computer, which in some cases may contain your personal data. You will also be notified of this when you first visit the site, in accordance with current legislation, and I will ask for your consent to do so. The data files are necessary for the operation of certain functions of the website, and information obtained from previous data files during your visits will be transferred to the operator. The exact name of these data files (_ga, gat, gid), you can find information about its function on this page. Google Analytics stores the IP address received via the browser anonymously and cannot link it to the user. The data is retained for 26 months, which period starts again if a new event occurs in relation to the user (e.g. starts a new session).

My data processing is based on consent (see above) for the following activities:

• Contact from interested parties via the website contact and quote request form

• Production of visitor statistics

• Contacting by phone

Consent can be withdrawn at any time, in the same simple way as it was given: Please write a short message to info@solarstudioswebdesign.hu by email to.

Processing prior to the withdrawal of consent is considered lawful.

I am legally obliged to keep invoicing records and issue invoices. If my client does not provide me with the requested data, it is impossible for me to perform the service I have undertaken to provide.

Once my services have been ordered, a contract is concluded with the customer, either in writing or verbally. My company mainly contracts with legal entities, but my contracts may include personal data, such as the name, telephone number, e-mail address of the contact person or the name of the legal entity's representative. I need to know this information as a condition of the contract, I need to know who the other party is and where I can reach them. Without this information, the contract is not considered concluded and I cannot provide the service.

• Contact form (name, email address) - review every six months until the end of the business relationship

• Billing name and address - for the period required by law, for sole proprietors: reference year + 5 years

• Website Maintenance Portfolio (e.g. backup storage) - until contract expires

• Business partners' data (name, e-mail address, telephone number) - until the business relationship is established, until cancellation request

• solarstudioswebdesign.hu cookies from the website - until the cookies expire or until the user deletes them from their browser

• Google Analytics traffic statistics - 26 months

I take appropriate security measures to ensure that personal data is protected against, inter alia, unauthorised access, disclosure or alteration. My laptop is accessed by entering a password and is protected by ESET Internet Security. I use my phone with fingerprint identification. I use double authentication to log in to Gmail. I also do my utmost to prevent unauthorised access to my website and use SSL encryption.

In designing the appropriate security measures, I have taken into account the state of the art, the nature, scope, context and purposes of the processing, and the varying likelihood and severity of the risk to the rights and freedoms of natural persons.

My company uses data processors to perform certain tasks.

Tárhely.Eu Ltd.
1144 Budapest, Ormánság utca 4. X. floor 241.
Tax number: 14571332-2-42
Company registration number: 01-09-909968
support@tarhely.eu
Access the full content of the website, forward emails to your own domain email address.

Billingo Technologies Zrt.
1133 Budapest, Árbóc utca 6., I. floor
Tax number: 27926309-2-41
Company registration number: 01-10-140802
business@billingo.hu

Gmail - Google Inc., Mountain View, California, USA
Access to your correspondence and all its data.

Gmail - Google Inc., Mountain View, California, USA

The only third country to which data is transferred is the United States of America. An adequacy decision with the US was adopted on 12 July 2016 https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_en which is respected by Google.

Visitors to my website, my customers, my partners have the right to request feedback on whether their personal data is being processed and, if so, to have access to the following information:

• Purposes of data processing

• Categories of personal data concerned

• Recipients to whom/which the personal data have been or will be disclosed, including recipients in third countries and international organisations

• The envisaged duration of data storage, and if this is not possible, the criteria for determining this duration

• The right of the data subject to obtain from the controller the rectification, erasure or restriction of the processing of personal data concerning him or her and to object to the processing of such personal data

I will provide you with a copy of the personal data that are the subject of the processing. For additional copies, I will charge a reasonable fee for administrative costs. If the request is submitted electronically, I will provide the information in a commonly used electronic format (.doc, .pdf, .xls, .jpg, etc.) unless the data subject requests otherwise.

The right to obtain a copy must not adversely affect the rights and freedoms of others.

My website visitors, customers and partners have the right to have inaccurate personal data about them corrected upon request. Taking into account the purpose of the processing, I may request the completion of incomplete personal data. I must inform any recipient to whom I have disclosed the personal data of the rectification, unless this is impossible or involves a disproportionate effort. The data subject will be informed of the recipients upon request.

I am obliged to delete without undue delay, at the request of my client, customer or website visitor, or without request, personal data relating to him/her if.

• the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

• the client/customer/visitor withdraws consent on which the processing is based and there is no other legal basis for the processing;

• the client/customer/visitor objects to the processing and there are no overriding legitimate grounds for the processing;

• I have unlawfully processed the personal data;

• the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject;

• personal data are collected in connection with the provision of information society services.

If I have disclosed personal data that I need to delete, I will take reasonable steps, taking into account the available technology and the cost of implementation, to inform the data controllers that my client/customer/website visitor has requested the deletion of the links to or copies or duplicates of the personal data in question.

I do not need to delete personal data if the processing is necessary for the establishment, exercise or defence of legal claims. If I receive a request to delete such data, I will consider it and respond in writing.

I must inform any recipient to whom I have disclosed the personal data of the erasure, unless this is impossible or involves a disproportionate effort. I will inform my client/agent/user of the recipients upon request.

My client/agent/visitor to the website has the right to request restriction of processing if:

• disputes the accuracy of personal data, pending clarification

• the data processing is unlawful and you request the restriction of the use of your data instead of their erasure;

• I no longer need the personal data for the purposes of processing, but the user/customer/client requires them for the establishment, exercise or defence of legal claims;

• the user/customer/my client has objected to the processing for legitimate interests; in this case, the restriction applies for the period until it is established whether the legitimate grounds of the controller prevail over the legitimate grounds of the data subject.

If the processing is restricted, personal data, other than storage, may only be processed with the consent of the user/customer/client or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.

I will inform the user/client/principal of the lifting of the restriction in advance.

I must inform any recipient to whom I have disclosed the personal data of the restriction, unless this is impossible or involves a disproportionate effort. I will inform my client/agent/user of the recipients upon request.

In the case of automated processing of data, where the legal basis for processing is consent or a contractual legal basis, my client/customer/site visitor has the right to receive the personal data concerning him/her that he/she has provided to me in a structured, commonly used, machine-readable format and to transmit this data to another controller, where technically feasible.

The right to data portability must not adversely affect the rights and freedoms of others.

My client / customer may object to the processing of their personal data on grounds relating to their particular situation at any time, provided that the legal basis for the processing is legitimate interest. In such a case, I may no longer process the personal data unless I can demonstrate compelling legitimate grounds which override the interests, rights and freedoms of my client/client or for the establishment, exercise or defence of legal claims.

I will treat your personal data with the utmost care. However, if you feel that I have not taken all reasonable steps to protect your personal data, or if you simply have a question, please contact me at info@solarstudioswebdesign.hu by email.

If my business breaches the data management principles, data subjects can exercise their rights in court, by bringing a civil action. The court will have jurisdiction to rule on the case.

The case can also be brought before the court in the place of residence of the person concerned (for a list of courts and their contact details, click here).

In addition, you can contact the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/C., postal address: 1530 Budapest, Pf.: 5., email: ugyfelszolgalat@naih.hu, website: http://www.naih.hu).

I have taken into account Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 6 December 2016 on data protection in relation to website contact, requests for quotes, traffic statistics and conversion measurement, cookies and business relations and agreements.

The basis for data processing in connection with invoicing is Article 6 (1) (c) of Regulation (EU) 2016/679 of the European Parliament and of the Council and Article 78 (3) of Act CL of 2017 on the Rules of Taxation (retention period for supporting documents) and Article 169 (e) of Act CXXVII of 2007 on Value Added Tax (mandatory elements of invoices).

This leaflet will enter into force on 25 September 2018 and I will revise the content as soon as new guidelines, positions or detailed rules become known that require me to amend it. If the scope of my business changes or I introduce new marketing tools, I will also revise it.