We use cookies to improve your experience and measure site traffic.

    Details in our Cookie Policy and Privacy Policy.
    PSH
    hu

    Privacy Policy

    1. Identity of the data controller

    • Name of the controller: Perfect System Hungary Kft.
    • Registered office: 3534 Miskolc, Almás utca 11., Hungary
    • Company registration number: 05-09-039501
    • Registry court: Miskolci Törvényszék Cégbírósága
    • Tax number: 32955985-2-05
    • Representative: Kiss Dorka
    • Email: perfectsystemhungary.kft@gmail.com
    • Phone: +36 20 212 5022

    Hosting provider

    2. Scope of this privacy policy

    This privacy policy applies to the processing of personal data carried out on the website of Perfect System Hungary Kft., in particular to:

    • the use of the quote request form,
    • the use of the callback request form,
    • file uploads,
    • the use of cookies and measurement tools,
    • the use of Google reCAPTCHA v2,
    • the display of customer reviews on the website,
    • and to the processing related to any contact made through the website.

    3. Principles of processing

    The controller processes personal data

    • lawfully, fairly and in a transparent manner,
    • for specified, explicit and legitimate purposes,
    • in accordance with the principle of data minimisation,
    • accurately and, where necessary, kept up to date,
    • subject to storage limitation,
    • protected by appropriate technical and organisational measures.

    The controller requests and processes only such data as are necessary for handling the given enquiry, for making contact, for preparing a quotation, or for the secure operation of the website. This is in line with the principles of the GDPR and with the requirement of clear, prior information.

    4. Data processed in connection with a quote request

    4.1. Categories of data processed

    When the quote request form is completed, the following data are processed:

    • name,
    • phone number,
    • email address,
    • town or city,
    • the selected service,
    • an indication that the enquiry is urgent, if the data subject marks it as such,
    • the content of the message,
    • the content of the uploaded file(s),
    • in the case of a business enquiry: company name and tax number,
    • the source data of the enquiry: the page from which the form was submitted and, where the data subject arrived from an advertisement or campaign link, the campaign identifiers contained in that link (utm_source, utm_medium, utm_campaign, utm_content, utm_term).

    4.2. Purposes of the processing

    The purposes of the processing are:

    • making contact,
    • preparing a quotation,
    • understanding the submitted request,
    • discussing in advance the conditions for providing the service,
    • obtaining further clarification where necessary,
    • in the case of the source data: establishing which page or campaign the enquiry originated from, that is, measuring the effectiveness of the controller's marketing activity.

    4.3. Legal basis of the processing

    For the substantive data of the quote request (name, contact details, town or city, selected service, urgency, message, company name and tax number, uploaded files), the legal basis is Article 6(1)(b) GDPR, namely taking steps at the request of the data subject prior to entering into a contract.

    Processing the source data of the enquiry (page visited, campaign identifiers) is not necessary for the preparation of a contract; the legal basis for these data is therefore Article 6(1)(f) GDPR, the legitimate interest of the controller in measuring the effectiveness of its marketing activity and in spending its advertising budget reasonably. The data subject may object to this processing at any time in accordance with Section 19; such an objection does not affect the handling of the enquiry itself.

    4.4. Retention period

    Where no contract results from the quote request, the controller processes the data provided in the request for 12 months from the last substantive contact. Deletion takes place automatically, by a process running daily, and also covers the files uploaded with the enquiry.

    Where the quote request results in an order, a contract or performance, the retention period is aligned with the related legal relationship, with the documentation of performance and with the applicable statutory – in particular accounting – obligations. Such enquiries are not affected by the automatic deletion.

    5. Callback requests

    5.1. Data processed

    When a callback is requested, the following data are processed:

    • name,
    • phone number,
    • an indication of whether the enquiry is residential or business,
    • the selected service, if provided by the data subject,
    • the requested callback time or availability, if provided by the data subject,
    • a short message or request, if provided by the data subject,
    • the source data of the enquiry as set out in Section 4.1 (page visited, campaign identifiers).

    5.2. Purpose

    The purpose of the processing is to enable the controller to contact the data subject and to fulfil the callback request. The purpose of the source data is the effectiveness measurement described in Section 4.2.

    5.3. Legal basis

    Article 6(1)(b) GDPR for the data of the callback request; for the source data, as explained in Section 4.3, Article 6(1)(f) GDPR, the legitimate interest of the controller.

    5.4. Retention period

    The controller processes callback request data for 6 months from the last substantive contact, where no further legal relationship arises from it. In this case, too, deletion takes place automatically, by a process running daily. Where the enquiry results in an order or a contract, retention follows the rules set out in Section 4.4.

    6. File uploads

    6.1. Purpose of file uploads

    The purpose of the file upload is to make the quotation more accurate, to better understand the technical content and to assess the task in advance.

    6.2. Which files may be uploaded

    The data subject may upload photographs, documents or other files relevant to the quotation. Such a file may also contain personal data.

    6.3. Legal basis

    Article 6(1)(b) GDPR.

    6.4. Retention period

    The controller processes uploaded files together with the quote request and retains them for 12 months from the last substantive contact, where no contract or other legal relationship arises from it. When the retention period expires, the files are removed from storage by the same automatic, daily process that deletes the data of the enquiry.

    Please upload only those files that are necessary for the quotation.

    7. Technical processing related to the operation of the website

    The system serving the website creates technical logs for the purposes of secure operation and troubleshooting; these may contain, for example, the IP address, the time of the request, the address of the requested page, and browser and device data. The legal basis for this processing is Article 6(1)(f) GDPR, the legitimate interest of the controller in the availability and security of the website.

    In addition, the controller keeps its own event log that contains no personal data. This records only the type of the event (for example a click on the phone number), the path of the page and the time of the event. It stores no IP address, no browser or device identifier, no cookie and no other data capable of identifying the data subject; the data thus generated therefore do not qualify as personal data.

    Non-essential cookies and measurement technologies are not activated automatically: until consent is given, the website loads no external measurement or marketing script and places no cookie for such purposes.

    8. Cookies and similar technologies

    8.1. What cookies are

    Cookies are small data files that a website may place in the visitor's browser. Some of them are necessary for the operation of the website, while others serve to measure and analyse its use or serve marketing purposes. The use of the browser's local storage (localStorage) also qualifies as a technology similar to cookies.

    8.2. Strictly necessary cookies

    Strictly necessary cookies serve the basic operation of the website. One such cookie is the controller's own psh_consent cookie, which stores the visitor's cookie choice, its timestamp and the version number of the consent manager, so that the system can respect that choice on every page load. Its lifetime is 1 year; the same value is also stored in the browser's local storage.

    This category also covers the abuse-prevention cookies of Google reCAPTCHA, which are created only on pages that contain the quote request form (see Section 13 for details).

    Legal basis: Article 6(1)(f) GDPR, the legitimate interest of the controller, and the technical provision of electronic communication.

    8.3. Statistical cookies

    The website uses Google Analytics 4 to measure traffic and usage patterns. The related cookies (_ga and _ga_<measurement-id>, which contains the measurement identifier) have a lifetime of 2 years. They are placed only after consent to statistical measurement has been given.

    Legal basis: the consent of the data subject, Article 6(1)(a) GDPR.

    8.4. Marketing cookies

    The website uses Google Ads conversion measurement to measure campaign performance. The related _gcl_au cookie has a lifetime of approximately 90 days, and Google may also create a _gcl_ls entry in the browser's local storage. These are created only after consent to marketing measurement has been given.

    No Meta Pixel is currently integrated into the website, and no such processing takes place. Should it be introduced in the future, it could only be activated on the basis of marketing consent, and this policy would be updated accordingly.

    Legal basis: the consent of the data subject, Article 6(1)(a) GDPR.

    8.5. Managing consent

    Non-essential cookies are activated solely on the basis of the data subject's prior consent. The website applies Google Consent Mode v2: measurement and advertising signals are denied by default and are granted only in accordance with the visitor's choice.

    Consent may be withdrawn at any time via the “Cookie settings” item in the footer of the website. Withdrawing consent is as easy as giving it: once consent is withdrawn the measurement scripts concerned are removed, and the website also deletes the statistics and marketing cookies created earlier from the device (_ga, _ga_<measurement-id>, _gcl_au, and the _gcl_ls local storage entry).

    The state of the consent – together with the timestamp of the choice and the version number of this policy – is stored exclusively on the visitor's own device, in the psh_consent cookie and in the browser's local storage. The controller does not keep a server-side consent record; consequently, deleting the data stored on the visitor's device (for example by clearing browsing data) also removes the consent.

    9. Google Tag Manager

    The website uses Google Tag Manager (container ID: GTM-T77MFXM7) to manage measurement and marketing tags. Tag Manager is not an analytics tool in its own right, but the technical framework for loading tags; the processing carried out by the tags managed through it is described in Sections 10 and 11.

    The container is loaded only after the visitor has given consent; in the absence of consent the website does not load Tag Manager either.

    Legal basis: the consent of the data subject, Article 6(1)(a) GDPR.

    10. Google Analytics 4

    10.1. Purpose

    Analysing the use of the website, obtaining traffic data, and analysing user journeys and behavioural patterns in aggregate form. Measurement ID: G-MPVTNHVWYF.

    10.2. Legal basis

    Article 6(1)(a) GDPR, the consent of the data subject. In the absence of consent the service is not loaded and places no cookie.

    10.3. Categories of data processed

    Technical and usage data, for example:

    • IP address in a shortened or otherwise technically processed form,
    • device and browser data,
    • page view and event data,
    • clicks and usage patterns.

    11. Google Ads conversion measurement

    11.1. Purpose

    Measuring which campaign the visitors of the website arrived from and whether they performed a specified action, such as requesting a quote or making contact. Conversion ID: AW-17956096620.

    11.2. Legal basis

    Article 6(1)(a) GDPR, the consent of the data subject. In the absence of consent, conversion measurement is not started.

    12. Measurement of phone number clicks

    The website measures how often visitors click on the displayed phone number in two mutually independent ways.

    12.1. The controller's own, non-identifying counter

    The controller's own system records only the type of the event, the path of the page and the time of the click. This measurement uses no cookie, neither reads nor stores any data on the visitor's device, and records no IP address, browser data or identifier; it is therefore not capable of identifying the visitor. The purpose of the processing is the aggregate measurement of contact activity; the data generated in this way are not personal data.

    12.2. Measurement using Google tools

    If the visitor has consented to statistical and/or marketing measurement, the phone click event is also forwarded through Google Tag Manager to Google Analytics 4 and to Google Ads. The legal basis for this is Article 6(1)(a) GDPR, the consent of the data subject; in the absence of consent this transfer does not take place.

    13. Google reCAPTCHA v2

    The website uses the Google reCAPTCHA v2 service to protect its forms against spam and abuse. reCAPTCHA is loaded only on those pages that contain the quote request form.

    13.1. Purpose

    Filtering out automated abuse, unsolicited submissions and bot traffic, and protecting the technical and IT security of the website.

    13.2. Legal basis

    Article 6(1)(f) GDPR, the legitimate interest of the controller.

    13.3. Note

    When reCAPTCHA is used, Google processes technical data (for example the IP address, device and browser data, and data relating to user interaction) for the purpose of filtering out unsolicited, automated submissions, and may place its own cookies for this purpose.

    14. Display of customer reviews

    Selected reviews from the publicly available Google reviews may be displayed on the website. They are not displayed through an embedded widget loaded from a third party: the controller retrieves the text of the reviews on the server side, stores it in its own database, and the website displays them from there.

    14.1. Purpose

    Building trust and presenting public reviews of the services provided.

    14.2. Note

    As the reviews are displayed from the controller's own system, viewing them does not involve any transfer of the visitor's data to Google and places no cookie on the visitor's device.

    15. Google Search Console and Bing Webmaster Tools

    The website may use Google Search Console and Bing Webmaster Tools for search engine optimisation and webmaster verification purposes. Their use relates to the administration of the website and to checking its indexing status, and on the website itself it amounts to placing, at most, a meta tag serving ownership verification.

    These systems do not collect visitors' personal data through the website, load no script and place no cookie; they therefore do not appear as a separate purpose of processing in relation to visitors.

    16. Processors and recipients

    For the operation of the website, the provision of hosting and the technical services, the controller uses the following processors.

    • Hosting provider: Hetzner Online GmbH (Germany) – operation of the website and of the back-end system (database, file storage)
    • Email delivery: Resend, Inc. (United States of America) – sending the internal notifications about quote and callback requests, as well as the confirmation emails sent to the data subject
    • Google services: Google Ireland Limited (Ireland) – Google Tag Manager, Google Analytics 4, Google Ads conversion measurement, Google reCAPTCHA v2, and the provision of the controller's corporate mailbox (Google Workspace), in which the notification emails about incoming enquiries appear

    The controller updates the above list of processors if the service providers it uses change. Under the GDPR, data subjects must be informed of the recipients or the categories of recipients.

    17. Transfers outside the EEA

    The controller endeavours to ensure that personal data are processed primarily within the European Economic Area (EEA). The website, its database and the uploaded files are stored in the European Union, in Germany, on the servers of Hetzner Online GmbH.

    Resend, Inc., which delivers the emails, operates in the United States of America; consequently the data required for email delivery (the recipient's name and email address and the content of the message) may also be transferred to the United States. Google Ireland Limited is a contracting party established in the European Union, but Google may also process data in the United States in the course of providing its services.

    In these cases the controller relies, as appropriate safeguards, on the data processing agreements concluded with the service providers and on the standard contractual clauses (SCC) adopted by the European Commission that form part of those agreements. A copy of the documentation of the safeguards applied may be requested from the controller at the contact details given in Section 1. The detailed data processing terms of each service provider are available in their own privacy policies.

    18. Summary of retention periods

    The controller does not retain data indefinitely, but only for as long as the purpose requires.

    • Quote request data: 12 months from the last substantive contact, with automatic deletion
    • Callback requests: 6 months from the last substantive contact, with automatic deletion
    • Uploaded files: together with the quote request, 12 months – deletion also takes place in the file storage
    • Technical logs: a maximum of 90 days
    • Cookie consent: stored exclusively on the visitor's own device, in the psh_consent cookie and in the browser's local storage, together with the timestamp of the choice and the version number of this policy; the lifetime of the cookie is 1 year. There is no server-side consent record.
    • Non-identifying event log: contains no personal data, and is therefore not subject to a retention limit
    • Contractual data or data related to performance: in accordance with the relevant legal relationship and legislation, in particular the accounting rules

    19. Rights of data subjects

    The data subject has the right to:

    • request information about the processing of their personal data,
    • request access to the data processed and obtain a copy of them,
    • request the rectification of inaccurate data,
    • request the erasure of their personal data,
    • request the restriction of processing,
    • exercise the right to data portability (Article 20 GDPR): to receive the data processed by automated means on the basis of consent or a contract in a structured, commonly used, machine-readable format and, where technically feasible, to have those data transmitted directly to another controller,
    • object to processing based on legitimate interest,
    • withdraw consent at any time where processing is based on consent; such withdrawal does not affect the lawfulness of processing carried out before the withdrawal,
    • lodge a complaint with the supervisory authority,
    • seek a judicial remedy.

    Requests may be submitted at the email address or postal address given in Section 1. The controller informs the data subject of the measures taken within one month of receipt of the request at the latest. These rights follow from Chapter III of the GDPR.

    20. Remedies

    If you believe that your rights have been infringed in the course of the processing of your personal data, you may lodge a complaint with the Hungarian supervisory authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH – Hungarian National Authority for Data Protection and Freedom of Information).

    • Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
    • Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
    • Postal address: 1363 Budapest, Pf. 9., Hungary
    • Phone: +36 (1) 391-1400
    • Email: ugyfelszolgalat@naih.hu
    • Website: naih.hu

    The data subject may also seek a judicial remedy before the competent court.

    21. Amendment of this privacy policy

    The controller reserves the right to amend this policy in the event of changes in legislation, technical modifications or the use of new service providers. The version in force at any given time is available on the website.

    Effective as of: 29 July 2026

    CallQuoteCallback