— Privacy

Privacy Policy

on the data processing related to the use of the poliscreen.hu website

1. Introduction

The purpose of this Privacy Policy (the "Policy") is to inform you, in a transparent and easily understandable form, about the personal data that Poliscreen Kft. (the "Controller" or the "Company") processes when you use the poliscreen.hu website (the "Website") and when you contact the Company — for what purpose, on what legal basis and for how long.

In processing personal data, the Controller pays particular attention to the following legislation:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – GDPR (General Data Protection Regulation);
• Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (the "Info Act");
• Act CVIII of 2001 on Electronic Commerce Services (the "E-commerce Act");
• Act C of 2003 on Electronic Communications (the "Eht.") – regarding cookies;
• Act XLVIII of 2008 on Economic Advertising Activity (the "Advertising Act") – in the case of newsletters;
• Act C of 2000 on Accounting (the "Accounting Act") – regarding the retention of accounting documents.

By starting to use the Website, you acknowledge that you have read this Policy.

2. Details of the Controller

• Name / company name: Poliscreen Kft.
• Registered seat: 8000 Székesfehérvár, Lomnici utca 49-51, door 4, Hungary
• Branch office: 1134 Budapest, Angyalföldi út 5/A, Hungary
• Company registration number: 07-09-036521
• Tax number: 32781379-2-07
• Representative: dr. József Szaniszló, managing director
• E-mail: info@poliscreen.hu
• Website: https://poliscreen.hu

3. Definitions

• Personal data: any information relating to an identified or identifiable natural person (data subject).
• Processing: any operation performed on personal data (collection, storage, use, transfer, erasure, etc.).
• Controller: the party that determines the purposes and means of the processing – in this case, the Company.
• Processor: the party that processes personal data on behalf of the Controller (e.g. the hosting provider).
• Data subject: the natural person whose data is processed (e.g. a visitor to the Website).

4. The individual processing activities

4.1. Contact (form / e-mail / phone)

Purpose: Responding to the enquiry, keeping in touch, preparing for a potential contract.

Data processed: Name, e-mail address, phone number (if provided), company/organisation name (if provided), the content of the message and any other data you voluntarily disclose.

Legal basis: GDPR Article 6(1)(b) – steps prior to entering into a contract; and/or (f) – the Controller's legitimate interest in responding to enquiries.

Duration: [6 months] after the enquiry is closed; in the case of a business relationship, the contractual retention period.

Legitimate interest – brief balancing test: The processing is initiated on the data subject's own initiative, the scope of data processed is minimal, and the data subject may object at any time; the processing is therefore proportionate. The full balancing test is available on request.

4.2. Request for quotation / interest in a service

Purpose: Preparing and sending an offer, agreeing on the scope of the service.

Data processed: Name, position, e-mail address and phone number of the contact person, details of the represented organisation, details of the requested service.

Legal basis: GDPR Article 6(1)(b) – steps prior to entering into a contract at the data subject's request.

Duration: [1 year] after the offer's validity period; in the case of a contract, the contractual retention period.

4.3. Server and security logging (log data)

Purpose: Ensuring the operation of the Website, maintenance, IT and data security, detecting abuse and attacks, troubleshooting.

Data processed: IP address, time of the visit, sub-pages visited, browser and operating system type, referring URL.

Legal basis: GDPR Article 6(1)(f) – the Controller's legitimate interest in the secure operation of the system and in network and information security [Recital (49)].

Duration: 12 months; in the case of a security incident, until its investigation is completed.

4.4. Cookies

The use of cookies is governed in detail in Section 5.

4.5. Job application / careers

Purpose: Assessing the submitted application, conducting the selection process.

Data processed: The data disclosed in the application (name, contact details, CV, cover letter, qualifications, experience).

Legal basis: GDPR Article 6(1)(b) – steps prior to entering into a contract; in the case of inclusion in a database, (a) – consent.

Duration: Erasure after the process is closed, except where consent is given for retention for 1 year.

4.6. Invoicing and accounting retention (in the case of a contract)

Purpose: Fulfilling statutory accounting and taxation obligations.

Data processed: The invoicing data and the data appearing on the accounting document.

Legal basis: GDPR Article 6(1)(c) – compliance with a legal obligation (Section 169 of the Accounting Act).

Duration: 8 years pursuant to Section 169(2) of the Accounting Act.

5. Management of cookies

A cookie is a small data packet that the Website places on the visitor's device and that can be read back during browsing or on a later visit.

The legal basis for the use of cookies:

• Cookies strictly necessary for operation (technical cookies) may be used without consent – legal basis: GDPR Article 6(1)(f) (legitimate interest).
• All other cookies (statistical, marketing, third-party) may be placed only with your prior, explicit consent (GDPR Article 6(1)(a)) via the cookie management interface (cookie banner), which can be changed or withdrawn at any time.

The cookies used:

Cookie	Type	Purpose	Lifetime	Legal basis
session_id	technical (necessary)	maintaining the session	until end of session	legitimate interest
cookie_consent	technical (necessary)	storing cookie settings	—	legitimate interest
_ga	statistical	measuring traffic	2 years	consent

We use the Google Analytics service to measure the Website's traffic and for web-analytics purposes. Google Analytics acts as a processor; you can read more about this at: support.google.com/analytics/answer/3379636.

Cookies can be deleted or disabled at any time in your browser settings; this may result in limited functioning of some features of the Website.

6. Processors

The Controller uses the following processors, who process the data solely in accordance with the Controller's instructions, on the basis of a written contract pursuant to Article 28 of the GDPR.

• Websupport Magyarország Kft.
  1119 Budapest, Fehérvári út 97-99, Hungary
  Reg. no.: 01-09-381419
  Hosting and operation of the poliscreen.hu website, storage of website files and database.
• Websupport Magyarország Kft.
  1119 Budapest, Fehérvári út 97-99, Hungary
  Storage and provision of the Company's electronic mail and communications.
• Optiprofit Kft.
  1172 Budapest, Gyöngytyúk utca 50, 1st floor, Hungary
  Reg. no.: 01-09-887313
  Bookkeeping and accounting activities.

7. Data transfer to a third country

The processing by certain providers (e.g. Google LLC) may also take place in the USA. The legal basis for the transfer is certification under the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCC), GDPR Article 46.

8. Data security

The Controller applies appropriate technical and organisational measures in accordance with Article 32 of the GDPR. To protect personal data, the Controller applies the technical and organisational measures actually available to it, including in particular – where available in the given system – encrypted data transmission, access restrictions, backups, and the security measures provided by the processors. Data protection incidents are handled in accordance with Articles 33–34 of the GDPR.

9. Rights of the data subject

• Right of access (GDPR Article 15).
• Right to rectification (Article 16).
• Right to erasure / "right to be forgotten" (Article 17).
• Right to restriction of processing (Article 18).
• Right to data portability (Article 20).
• Right to object (Article 21) – to processing based on legitimate interest.
• Right to withdraw consent (Article 7(3)) – withdrawal does not affect the lawfulness of processing carried out beforehand.

How to exercise your rights: you may submit your request via the contact details in Section 2. The Controller fulfils the request without undue delay, at the latest within 1 month (which may be extended by a further 2 months if necessary). The information is provided free of charge.

10. Remedies

Complaint to the supervisory authority: if you consider that the processing infringes the GDPR, you may lodge a complaint with the authority:

• Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
• Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary
• Postal address: 1363 Budapest, Pf.: 9, Hungary
• Phone: +36 (1) 391-1400
• E-mail: ugyfelszolgalat@naih.hu
• Website: www.naih.hu

Judicial remedy: pursuant to Article 79 of the GDPR and the Info Act, you may also turn to the courts; the lawsuit may – at your choice – be brought before the regional court of your place of residence or stay. We recommend that you first contact the Controller directly with your complaint.

11. Amendment of the Policy

The Controller reserves the right to unilaterally amend the Policy, in particular in the event of a change in legislation. The Policy in force at any given time is available on the Website; the Controller will provide appropriate notice of any material amendment.

Poliscreen Kft.
Dated: Budapest, 1 July 2026.