Privacy Policy
Effective from 1 July 2026 · rendszermentor.hu
1. Data controller
The operator of the rendszermentor.hu website (the „Website”) and the controller of the data processing described here:
- Name: Gábor Lőkös, sole proprietor
- Registered seat: 5600 Békéscsaba, Degré utca 45., Hungary
- Registration number: 23748299
- Tax number: 60850942-2-24
- Email: info@rendszermentor.hu
- Phone: +36 (30) 629-2359
The controller processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Privacy Act).
2. Scope
This notice applies to visitors of the Website, to those who fill in the contact form, to those who order a consultation or other service, and to future newsletter subscribers. The Website does not provide services to persons under the age of 16 and does not knowingly collect personal data from them.
3. Data processed: scope, purpose, legal basis and retention
3.1. Contact form and email enquiry
| Data processed | name, company name (if provided), email address, phone number (if provided), the content of the message |
|---|---|
| Purpose | answering the enquiry, arranging a consultation appointment, providing a quote |
| Legal basis | Article 6(1)(b) GDPR: steps taken at the data subject’s request prior to entering into a contract |
| Retention | 1 year after the enquiry is closed; in the case of a contract, as part of the contractual records under section 3.2 |
3.2. Webshop purchase and order
| Data processed | name, email address, phone number, billing address, the ordered service and order details (order number, amount, payment method, date), the note added to the order |
|---|---|
| Purpose | receiving, confirming and fulfilling the order, keeping in contact, handling withdrawal and warranty claims |
| Legal basis | Article 6(1)(b) GDPR: performance of the contract |
| Retention | the civil-law limitation period: 5 years from performance (Section 6:22 of the Hungarian Civil Code) |
If you create an account at purchase (My Account), we process the account data (name, email address, order history, Club subscription status) until the account is deleted; the account can be deleted at any time on the My Account page or by an email request.
3.2/A. Invoicing
| Data processed | name or company name, registered seat or address, tax number, other mandatory data shown on the invoice |
|---|---|
| Purpose | issuing invoices, bookkeeping, meeting tax obligations |
| Legal basis | Article 6(1)(c) GDPR: compliance with a legal obligation (Section 169 of the Accounting Act, Section 169 of the VAT Act) |
| Retention | accounting documents are kept for 8 years as required by law |
For bank transfer payments, your bank processes the transfer data as an independent controller; your bank’s privacy notice provides information on this.
3.3. Newsletter (from the launch of the service)
| Data processed | name, email address, date of subscription |
|---|---|
| Purpose | sending professional content, news and offers |
| Legal basis | Article 6(1)(a) GDPR: the data subject’s consent, which can be withdrawn at any time via the unsubscribe link at the bottom of the emails or by email |
| Retention | until consent is withdrawn |
3.4. Cookies and statistics
The Website uses strictly necessary cookies on the basis of legitimate interest, and places all other cookies (for example Google Analytics statistical cookies) only after your prior consent. Consent can be given in the cookie bar and can be changed at any time via the „Change cookie settings” link in the footer.
| Cookie | Type | Purpose | Lifetime |
|---|---|---|---|
| rm-consent (localStorage) | necessary | storing your cookie preference | until deleted |
| WordPress session cookies | necessary | secure operation of the website | session |
| woocommerce_cart_hash, woocommerce_items_in_cart | necessary | tracking the cart contents during purchase | session |
| wp_woocommerce_session_* | necessary | linking the customer’s cart to the session | 2 days |
| wordpress_logged_in_* | necessary | identifying a logged-in account (My Account) | session / 14 days |
| _ga, _ga_* (Google Analytics) | statistical, only with consent | anonymised measurement of visitor statistics | up to 2 years |
3.5. Server logs
To operate the server securely, the hosting provider keeps technical logs (IP address, time, requested page, browser identifier). Legal basis: Article 6(1)(f) GDPR, the legitimate interest of the controller and of visitors in secure operation. The logs are automatically deleted after a short period, typically no more than 30 days.
4. Who has access to the data?
Only the controller has access to the data, together with the following processors to the extent necessary to perform their tasks.
5. Data processors
| Processor | Activity |
|---|---|
| Hostinger operations, UAB Jonavos g. 60C, 44192 Kaunas, Lithuania gdpr@hostinger.com | hosting, operation of the website and email accounts |
| KBOSS.hu Kft. (Számlázz.hu) 1031 Budapest, Záhony utca 7., Hungary privacy: szamlazz.hu/adatvedelem | issuing electronic invoices for webshop and other orders (transfer of billing data) |
| Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland | visitor statistics (Google Analytics), only with consent |
| Cal.com, Inc. San Francisco, United States (EU-U.S. Data Privacy Framework certified) | online appointment booking; processes data only when the booking calendar is loaded |
| Professional Analysis Kft. 6645 Felgyő, Kossuth út 27., Hungary | bookkeeping and document processing |
6. Transfer to third countries
When Google Analytics is used, data may also be transferred outside the European Economic Area, to the United States. Google LLC is a certified participant of the EU-U.S. Data Privacy Framework, so the transfer is based on an adequacy decision under Article 45 GDPR. No other data is transferred to third countries.
7. Data security
The Website is accessible over an encrypted (SSL/HTTPS) connection. The controller protects access to the data with a password and two-factor authentication, stores the data only for as long as necessary, and regularly updates the website’s software environment. In the event of a data breach, the controller acts in accordance with Articles 33 and 34 GDPR.
8. Your rights
In relation to your personal data, you may at any time request:
- information and access (what we process, why and for how long),
- rectification (correction of inaccurate data),
- erasure („right to be forgotten”, if there is no other legal basis for the processing),
- restriction of processing,
- data portability (the data you provided in a structured, machine-readable format),
- you may object to processing based on legitimate interest,
- you may withdraw your consent at any time (this does not affect the lawfulness of processing before the withdrawal).
You can send your request to info@rendszermentor.hu. We answer the request within one month at the latest; in justified cases this deadline may be extended by two months, with prior notice.
9. Remedies
If you consider that the data processing infringes the law, you may lodge a complaint with the supervisory authority:
- Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
- Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary · Postal address: 1363 Budapest, Pf. 9.
- Phone: +36 (1) 391-1400 · Email: ugyfelszolgalat@naih.hu · Web: www.naih.hu
In addition, you may also turn to the court competent for your place of residence or stay.
10. Other provisions
- We do not use automated decision-making or profiling.
- We do not share the provided data with third parties for marketing purposes.
- The controller reserves the right to amend this notice; the version in force at any given time is available on the Website.