Dear Customer!

While you visit our company’s website, request a quote, place an order, or send us a message, our company processes personal data about you. Below, we would like to provide you with the most important information about this process and your rights. If you have any further questions regarding the processing of your personal data, do not hesitate to contact us at privacy@brighthills.com or using the contact information provided below.

What is considered as personal data?

Personal data is any information related to an identified or identifiable natural person (data subject). For example, your name, address, date of birth, the content of messages sent to us, or the details of your order are considered as personal data.

Data related to legal entities, institutions, public offices, associations (such as the name and contact information of a company, or data submitted by a company for an order) does not qualify as personal data. Similarly, data where the data subject is not identifiable, such as anonymized or statistical data, is not considered personal data.

Who processes your personal data?

BrightHills Ltd.
Headquarters: 9024 Győr, Vasvári Pál út 1/C.
Company registration number: 08-09-011535
Representatives: Farkas Paul Andor CEO; Kardos Lajos, Molnár Pál, Kuntner Krisztián managing directors
Phone number: +36 96/550-521
Data Protection Officer: Ivék Orsolya
Email: privacy@brighthills.com

What sort of personal data does the Company process and for what purpose?

For the purpose of preparing a quote, our Company processes your name, address, contact details (phone number, e-mail address) along with the content of the quote request (i.e. the product or service for which you have requested a quote). The purpose of data processing is to identify the customer and to contact him/her in order to be able to send a quote.

If you place an order for one of our products or services, we will process your name, address, contact details and the name, characteristics and content of the product or service ordered, as well as the content of any additional requests you send to our Company in connection with your order, in order to fulfil the order. In this case, the purpose of the processing is to ensure the accurate fulfilment of your order to the fullest possible extent and to keep in contact with you in order to inform you of the information and status of your order in relation to the product or service you have ordered.

After fulfilling the order, our Company will issue an invoice to you in accordance with applicable laws. To issue the invoice, our Company processes your name, address, and the name and price of the ordered product or service.

If our Company provides a warranty for the ordered product or service or is obligated to provide a warranty under the law, the Company processes your name, address, order data, warranty certificate and/or invoice data, as well as the content of the warranty claim in order to fulfill warranty claims (to determine the legitimacy of the claim and to identify the relevant product or service).

The purpose of this data processing is to allow the Company to enforce any rights and claims that may arise from the contract, as well as to defend against such legal claims and demands in the event of future legal disputes, and it is kept for a period of five years following the termination of the contract in accordance with the general statute of limitations rules of the Civil Code.

To prevent future legal disputes and to be able to prove facts in the event of a legal dispute, personal data that has not been deleted following the termination of the contract will be kept by the Company for five years, in accordance with the general statute of limitations rules of the Civil Code. The purpose of this data processing is to enable the Company to assert any rights and claims arising from the contract and to defend against such legal claims and demands when they are presented.

In order to facilitate quick and efficient resolution of customer issues, our Company operates a product support service. Employees of the support service may remotely access the computer systems installed or operated by the Company at the customer’s site to investigate and resolve customer issues, within the framework defined in the contract with the customer. When performing these activities, the Company acts as a data processor and is required to ensure the confidential handling, accessibility, and integrity of these personal data in accordance with data protection regulations.

On our Company’s website, there is an option to send us a message via a contact form. When you send a message, all data provided on the contact form (name, address, contact information, and message content) will be processed by our Company for the purpose of responding to your message.

When you visit our Company’s website, the website collects data about visitors for the purpose of improving services and providing a better user experience. For this purpose, the website may place a small piece of code, known as a cookie, on the visitor’s computer for analytical purposes. The visitor is informed of this fact when the website is first opened and can acknowledge the information and give consent for data processing. These cookies are stored on your computer, and you can delete them at any time by following the instructions provided in the links below:

• For Mozilla Firefox browser (https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored)
• For Google Chrome browser (https://support.google.com/chrome/answer/95647?hl=en)
• For Microsoft Edge browser (https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy)

For the proper functioning of our Company’s website, a small piece of code known as a cookie is placed on the visitor’s computer. Without it, the website will not function correctly. In this case, the purpose of data processing is to provide the service. By visiting the website, the customer consents to the placement of these types of cookies. These cookies are stored on your computer, and you can delete them at any time as described in the previous paragraph.

Legal basis for data processing:

1. In case of the personal data provided for the preparation of a quotation, the legal basis for data processing is the preparation of a contract with you.
2. In case of the personal data provided during the fulfillment of an order, the legal basis for data processing is the performance of the contract (order) with you.
3. In case of the personal data provided for issuing an invoice, the legal basis for data processing is the fulfillment of a legal obligation applicable to the data controller.
4. In case of the personal data provided to assert warranty claims, the legal basis for data processing is the fulfillment of a legal obligation applicable to the data controller.
5. For product support activities (support), the legal basis for data processing is the performance of the contract with the customer.

In the above cases, providing the requested personal data is a condition for using the service or entering into a contract, so you are required to provide them when requesting a quotation, ordering a product/service, making a purchase, invoicing, or asserting a warranty claim. Failure to provide the data may result in the Company refusing to enter into a contract or fulfill your request or other requirements.

1. When filling out and submitting the contact form on the Company’s website, the legal basis for data processing is your consent. By sending the contact form, you consent to the Company processing the data provided therein for the purpose of the Company becoming aware of it, storing it, and using it to respond to your inquiry or prepare a quotation.
2. When you visit the Company’s website, the placement, storage, and reading of cookies (cookies) on your computer for the purpose of enhancing the user experience and for analytical purposes is done with your consent.

The placement, storage, and reading of cookies placed by the Company’s website and used to ensure the proper functioning of the website is a prerequisite for the operation of the website. In this case, the legal basis for data processing is the preparation or performance of a contract with the customer. The data processing is necessary for the proper functioning of the website, and therefore, customers visiting the website cannot prohibit this type of data processing.

‍

Does the Company transmit your personal data?

The Company may transmit your personal data to a court or other authority in accordance with legal provisions and procedures, based on requests, legal obligations, or court orders.

How long does the Company store your personal data?

The Company is obligated to retain personal data related to invoicing or orders for the duration required by accounting and tax laws. The personal data used for contact, orders, contract formation, and invoicing, which are not deleted following the termination of the contract, the completion of the contract, or the failure to conclude a contract, will be retained by the Company for a period of five years after the termination of the contract, in accordance with the general limitation rules of the Civil Code of 2013. The purpose of data processing in this section is to enable the Company to assert its possible rights and claims arising from the contract or defend against such legal claims and demands when presented.

The Company will retain personal data that is processed with your consent for as long as necessary to fulfill the purpose of the data processing or until you request the deletion of your personal data.

What rights do you have regarding the processing of your personal data?

Information and access

You have the right to access the data processing. Therefore, you may request information from the Company on whether your personal data are being processed and, if so, on the data processed by the Company or by a processor appointed by it or on its behalf, their source, the purposes of the processing and the legal basis for the processing, the name, address and activities of the data processor in relation to the processing, the circumstances of the personal data breach, its effects and the measures taken to remedy it, and, in the case of a transfer of personal data, the legal basis and recipient of the transfer. Upon your request, the Company will provide you with a copy of the data it processes.

Rectification

While your personal data is being processed, you may, at any time, request the Company to correct or supplement the personal data about you. If the personal data is not accurate and the correct personal data is available to the Company, the Company will emend the personal data. The Company will notify you of the rectification, as well as any third parties to whom the data may have been previously disclosed for processing purposes.

Erasure

At any time during the processing, you have the right to request that the Company delete your personal data(s) without undue delay if one of the following grounds applies:

1. The personal data you have provided is not necessary for the purposes for which it was collected or otherwise processed by the Company,
2. The Company has processed the personal data on the basis of your consent, you have withdrawn your consent in writing and there is no other legal basis for the processing,
3. You object to the processing based on the Company’s legitimate interests and there are no compelling legitimate grounds for the Company to override your interests, rights and freedoms or to assert, exercise or defend legal claims,
4. The Company has unlawfully processed the personal data,
5. The data processed by the Company must be erased in order to comply with a legal obligation under Union or national law applicable to the Company,
6. You object to the processing and there are no overriding reasons for the processing.

Please note that you must submit your request for erasure in writing (by post or e-mail) and you must indicate the reason for which you wish to erase the personal data.

If the Company grants your request for erasure, it will erase the personal data processed from all its records and will inform you accordingly.

In the event that the Company is under an obligation to erase your personal data, the Company will take all reasonable steps, including the use of technical measures, necessary to inform the data controllers who have become aware of your personal data as a result of its disclosure of the mandatory erasure of your personal data. The Company shall inform other data controllers in its prospectus that you have requested the deletion of links to your personal data or of copies or replicas of such personal data. The Company will promptly inform the persons to whom your personal data have been disclosed of your request to exercise your right to erasure, provided that this is not impossible or involves a disproportionate effort on the part of the Company.

The Company is under no obligation to delete personal data where processing is necessary:

1. for the exercise of the right to freedom of expression and information,
2. to fulfil an obligation imposed on the Company by Hungarian or European Union law to process personal data,
3. for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Company,
4. to pursue a public interest in the field of public health,
5. for archiving purposes in the public interest, scientific and historical research purposes or statistical purposes, provided that the exercise of the right to be forgotten would be likely to render the processing impossible or seriously jeopardise the data subject’s right to be forgotten,

for the establishment, exercise or defence of legal claims.

Restriction

You have the right to request at any time that the Company restrict the processing and use of your personal data if one of the following reasons applies:

1. You dispute the accuracy of the personal data (in this case, the restriction will remain in place until the Company verifies the accuracy of the data).
2. The Company has processed the personal data unlawfully, but you request restriction instead of deletion.
3. The purpose of the data processing has ceased, but you require them for the establishment, exercise, or defense of legal claims.
4. You object to the processing of personal data by the Company based on its legitimate interests, and there are no compelling legitimate grounds for the processing, or the processing is necessary for the establishment, exercise, or defense of legal claims. In this case, the restriction will remain in place until it is determined whether the Company’s legitimate reasons take precedence over your legitimate reasons.

During a restriction, personal data can only be processed with your consent, for the establishment, exercise, or defense of legal claims, to protect the rights of other natural or legal persons, or for reasons of important public interest within the European Union or a European Union Member State.

After granting your request for restriction, the Company will promptly inform those individuals with whom it has shared your personal data, unless it is impossible or requires disproportionate effort.

Withdrawal of consent

Where processing has been carried out with your consent, you have the right to withdraw your consent at any time, without prejudice to the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

Data portability

You may, at any time, request to receive personal data concerning you that the Company has provided to you in a structured, commonly used, machine-readable format and you have the right to transfer such data to another controller without the Company’s hindrance.

Claims

You may take legal action against the Company in case of violation of your privacy rights.

You may seek the assistance of the National Authority for Data Protection and Freedom of Information in data protection matters at any time:

President: dr. Péterfalvi Attila
PO Box: 1534 Budapest, Pf.: 834
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Telephone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
www: http://www.naih.hu
e-mail: ugyfelszolgalat@naih.hu

For the enforcement of your rights in matters not covered by this Policy, Act CXII of 2011 on Informational Self-Determination and Freedom of Information and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation, GDPR) shall apply.

The detailed Privacy Policy on the processing of personal data and the operation of the CCTV system is available at the Company’s headquarters and on the Company’s official website.

If you have any questions regarding the processing of your personal data or if you wish to exercise your data subject rights, please contact the Company’s designated data protection officer, Orsolya Ivék, at privacy@brighthills.com.

Contact informations

BrightHills Ltd.
Headquarters: 9024 Győr, Vasvári Pál út 1/C.
Phone number: 96/550-521
Email: privacy@brighthills.com