Privacy notice

Full name: BriCS Szoftverfejlesztő és Tanácsadó Korlátolt Felelősségű Társaság

Short name: BriCS Kft.

Registered office: Szépvölgyi utca 9, 9400 Sopron, Hungary

Company registration number: 08-09-038006

Tax number: 27928662-2-08

Privacy enquiries: info@brics-soft.com

Website: https://bricsapp.hu

This notice covers visits to public BriCS websites, the use of contact and demo request forms, the storage of cookie preferences, and consent-based web analytics.

It applies only to personal data relating to natural persons. Company data is not personal data in itself, but the name and contact details of a person acting on behalf of a company may be personal data.

Data processed: name, company name, email address, optional telephone number, the free-text content of the enquiry, the relevant product, the time of the enquiry and – where the visitor has separately consented – related campaign and session identifiers.

Purpose: responding to the enquiry, making contact, assessing requirements, and preparing a proposal or demonstration.

Legal basis: steps taken at the data subject’s request prior to entering into a contract under Article 6(1)(b) GDPR; for other business enquiries, the legitimate interest under Article 6(1)(f) GDPR. The legitimate interest is responding to and documenting incoming enquiries.

Retention: for an enquiry that does not result in a business relationship, no longer than two years after the enquiry is closed. If a contract or legal claim arises, the applicable accounting, tax and limitation periods apply.

The enquiry cannot be submitted without a name and email address. Providing a company name, telephone number and free-text message is optional.

Data processed may include an IP address or a keyed hash of it, browser and device data or their hashes, request time, the requested URL, the origin of the referring page, and security and error information.

Purpose: keeping the website available and secure, detecting misuse and automated attacks, troubleshooting, and verifying the basic operation of campaign links.

Legal basis: legitimate interest under Article 6(1)(f) GDPR. The Controller has a legitimate interest in protecting its IT systems and services.

Retention: raw technical logs may be retained for up to 30 days and pseudonymised link and click data for up to 180 days. In the event of a security incident or legal claim, relevant data may be retained for the time necessary to investigate or resolve it.

Optional analytics processing starts only after the visitor has given prior consent. Data may include a random session and consent identifier, page path and language, the selected BriCS product, basic usage events, and campaign and referral data.

Purpose: producing aggregated traffic statistics, measuring the effectiveness of content and campaigns, and improving the website.

Legal basis: consent under Article 6(1)(a) GDPR. Consent can be withdrawn at any time in cookie settings; withdrawal does not affect the lawfulness of earlier processing.

Retention: analytics event data may be processed for up to 180 days. The browser remembers the consent choice for 180 days, after which the website may ask again. An external analytics or marketing provider may be enabled only after this notice and the cookie settings have been updated accordingly.

The website stores the visitor’s privacy choice in the browser’s local storage. This setting contains the consent categories, version and timestamp so that the website can remember the choice.

Where analytics consent is given, the browser’s session storage may also contain temporary session and campaign data. These are deleted at the end of the browser session. Rejecting optional categories does not prevent the basic use of the website.

Personal data may be accessed only by authorised BriCS Kft. personnel on a need-to-know basis and by contracted providers supplying website hosting, databases, technical operations or customer relationship systems, to the extent necessary. Processors may act only on the Controller’s documented instructions and are bound by confidentiality and data security obligations.

The Controller does not sell personal data. No data is transferred outside the European Economic Area. If such a transfer or a new external measurement provider is introduced in the future, the Controller will update this notice in advance and put the required safeguards in place.

You may request information about and access to your personal data, ask for its rectification, erasure or restricted processing, and – where the statutory conditions are met – request data portability. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. Consent may be withdrawn at any time without giving a reason.

Requests may be sent to the Controller’s email address above. The Controller will respond without undue delay and normally within one month. Where necessary, taking into account the complexity and number of requests, this period may be extended by a further two months; the Controller will inform you of the extension within one month. The Controller may ask you to confirm your identity before acting on a request.

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

Address: Falk Miksa utca 9–11, 1055 Budapest, Hungary

Postal address: 1363 Budapest, Pf. 9, Hungary

Email: ugyfelszolgalat@naih.hu

Telephone: +36 1 391 1400

Web: https://www.naih.hu

You may also bring proceedings before a court if you believe that your rights have been infringed by the processing of your personal data.

BriCS Kft. applies technical and organisational measures appropriate to the risks to protect the confidentiality, integrity and availability of personal data. These measures include access restrictions, encrypted data transmission, logging, backups and regular security updates.

The Controller may amend this notice when introducing a new processing purpose, provider or technology, or following a change in law. The current version is always available on this page. The Controller will also provide separate notice of material changes in a manner appropriate to the circumstances.