Privacy Notice

on the Processing of Personal Data Provided on the Hydroworx Kft. Website

  1. Details of the data controller

Name of the Data Controller: Hydroworx Kft.

Registered office: 1165 Budapest, Anilin utca 2/A, Door 3

Company registration number: 01-09-415532

Represented by: Dániel Tuba

E-mail: hydroworx@hydroworx.hu

Website: hydroworx.hu

Enquiries relating to data processing and data subject rights may be submitted via the above e-mail address.

 

  1. Purpose of data processing

The personal data voluntarily provided via the contact form available on the website or by e-mail to the Data Controller are processed for the following purposes:

  • responding to enquiries;
  • maintaining contact with the enquirer;
  •  preparing for the potential conclusion of a contract;
  •  conducting any necessary business discussions related to the enquiry.

We do not use personal data for purposes other than those specified above, unless such processing for a different purpose is permitted or required by law, or there is an appropriate legal basis for processing the data for the different purpose.

 

  1. Categories of personal data processed

The following personal data provided by the data subject via the contact form or in an e-mail enquiry are processed:

  • name or company name;
  • e-mail address;
  • telephone number;
  • any other personal data voluntarily provided by the data subject in the message.

When contacting us, please provide only the data necessary for the purpose of the enquiry and, where possible, refrain from sending special categories of personal data or personal data relating to other individuals.

 

  1. Legal Basis for Data Processing

4.1. Steps prior to entering into a contract

Where the contact relates to the use of any of our services, a request for a quotation, or the preparation for entering into a contract, the legal basis for processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), i.e. processing necessary for taking steps at the request of the data subject prior to entering into a contract.

4.2. Legitimate interest

In the case of general enquiries, requests for information, or enquiries that are not directly related to entering into a contract or preparing for its conclusion, the legal basis for processing is the legitimate interest set out in Article 6(1)(f) of the GDPR. The Data Controller’s legitimate interest is to receive and respond to enquiries, maintain contact with persons making enquiries, and conduct professional and business discussions relating to its services.

The Data Controller processes personal data only to the extent necessary to handle the enquiry.

 

  1. Data retention period

If no business relationship arises from the contact, we retain the personal data for a maximum period of 1 year following the response to the enquiry and the conclusion of any related communication. Thereafter, the data will be deleted, unless further retention is required by law or is necessary for the establishment, exercise or defence of a legal claim.

If a contract is concluded as a result of the enquiry, we retain the data for the period necessary for the performance of the contract, compliance with related legal and accounting obligations, and the handling of any potential legal claims.

The retention period applicable to individual data depends on the nature of the data and the purpose of the processing.

 

  1. Access to personal data and data protection

Personal data may be accessed by those employees of Hydroworx Kft. whose duties require access to such data.

The Data Controller engages data processors for the operation of the website and IT infrastructure, as well as for the provision of electronic mail services. Data processors process personal data only to the extent necessary to provide their respective services.

No automated decision-making or profiling takes place in the course of data processing.

 

6.1. BITheory Kft.

Company registration number: 01-09-877647

E-mail: info@bitheory.hu

Website: bitheory.hu

Purpose and scope of data processing: the technical operation of the Hydroworx Kft. website and the related IT infrastructure, including in particular:

  • provision of hosting services;
  • provision and operation of the server;
  • technical operation and maintenance of the website;
  • performance of IT-related tasks associated with the operation of the website;
  • ensuring the technical operation of the contact form.

BITheory Kft. processes personal data solely on the instructions of Hydroworx Kft. and only to the extent necessary to perform the above tasks.

 

6.2. Microsoft 365 / Exchange Online

Data Processor: Microsoft Ireland Operations Limited

Address: One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland

Hydroworx Kft. uses Microsoft 365 / Exchange Online as its electronic mail service. In connection with the provision of this service, personal data — including, in particular, e-mails received through the contact form and their contents — may be processed in IT systems operated by Microsoft.

Microsoft sets out the data processing terms applicable to Microsoft 365 services, as well as the safeguards relating to international data transfers, in its privacy and contractual documentation.

 

  1. Recipients of personal data and data transfers

The Data Controller does not sell personal data and does not transfer personal data to third parties for marketing purposes.

Data processors engaged by the Data Controller may have access to personal data to the extent necessary for the performance of their tasks.

In the course of responding to enquiries and maintaining business relationships, the Data Controller may transfer personal data to the recipient of the enquiry or to a contact person or organisation designated by the data subject, where this is necessary for communication or the provision of services.

Personal data may be transferred to an authority or another authorised third party where required by law or where necessary for the establishment, exercise or defence of a legal claim.

 

  1. Transfers of personal data to third countries

In connection with the operation of the Microsoft 365 / Exchange Online service, certain limited personal data may be transferred to or made accessible from outside the territory of the European Union/EFTA, for example in the course of processes related to monitoring the operation and status of the service.

Where personal data are transferred to a country outside the European Economic Area, Microsoft applies appropriate safeguards as set out in Chapter V of the GDPR, including, in particular, the Standard Contractual Clauses (SCCs) adopted by the European Commission.

Further information regarding international data transfers is available in Microsoft’s privacy and data processing documentation.

 

  1. Rights of Data Subjects

The data subject has the right to:

  • request information about the processing of their personal data;
  • request access to the personal data being processed;
  • request the rectification of their personal data;
  • request the erasure of their personal data;
  • request the restriction of processing;
  • object to the processing of their personal data in cases specified by law;
  • lodge a complaint with the supervisory authority.

Requests concerning data subject rights may be submitted via e-mail to hydroworx@hydroworx.hu.

 

  1. Remedies

If you believe that the processing of your personal data violates applicable laws and regulations, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary

Website: www.naih.hu

E-mail: ugyfelszolgalat@naih.hu

Telephone: +36 (1) 391-1400

 

The data subject may also seek judicial remedy in accordance with the GDPR and applicable laws and regulations.

 

  1. Cookies and Web Analytics

The website does not use cookies or other tracking technologies for statistical or marketing purposes, including for tracking users’ browsing habits.

During the operation of the website, cookies may be used that are strictly necessary for the technical and secure operation of the website, such as cookies used by the web server or the content management system. The website operator uses such technical cookies solely for purposes necessary for the operation of the website.

 

  1. Amendments to this Privacy Notice

The Data Controller reserves the right to amend this Privacy Notice where necessary. The version currently in force is available on the website.

 

Effective date / Last updated: 1 September 2026