Privacy Policy
Effective: 1 January 2025
1. Data controller
Company name: Ekoablak Kft.
Registered address: Kossuth tér 1., 2740 Abony, Hungary
E-mail: info@ekoablak.hu
Phone: +36 30 655 6553
Ekoablak Kft. (hereinafter: "Controller") processes personal data collected through this website in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Hungarian data protection legislation.
2. Categories of data processed
| Data category | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Name, phone, e-mail | Contact & quotation | Consent (Art. 6(1)(a) GDPR) | Up to 5 years |
| Address | Contract performance | Contract (Art. 6(1)(b) GDPR) | 5 years |
| Billing data | Accounting obligation | Legal obligation (Art. 6(1)(c) GDPR) | 8 years |
| IP address, browsing data | Analytics | Legitimate interest / consent | Up to 13 months |
3. Data processors
- Hosting provider – server infrastructure for the website
- E-mail provider – electronic communication
- Google LLC – Google Analytics; data transfer to the USA under Standard Contractual Clauses
4. Your rights
- Right of access – you may request information about your data (Art. 15 GDPR)
- Right to rectification – you may request correction of inaccurate data (Art. 16 GDPR)
- Right to erasure – you may request deletion of your data (Art. 17 GDPR)
- Right to restriction – you may request restriction of processing (Art. 18 GDPR)
- Right to portability – you may receive your data in machine-readable format (Art. 20 GDPR)
- Right to object – you may object to processing based on legitimate interest (Art. 21 GDPR)
Please send requests to info@ekoablak.hu. We respond within 30 days.
5. Complaints
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): Falk Miksa utca 9–11., 1055 Budapest, Hungary | www.naih.hu
6. Data security
The Controller applies appropriate technical and organisational measures (encryption, access controls, backups). In the event of a data breach, the Controller acts in accordance with Articles 33–34 GDPR.