Privacy Notice for Getsmart Kft. - ENG

PRIVACY NOTICE

For the corporate website of GetSmart Kft.

Effective date: 17 September 2026

1. Scope of this Privacy Notice

This Privacy Notice applies to the use of the corporate presentation website operated by GetSmart Kft. in connection with the getsmart.hu domain.

The website is technically operated on the Shopify platform and may currently also be accessible at the following Shopify page:


https://okoscucc.hu/pages/getsmart_en

This Notice applies to browsing the website, contacting GetSmart Kft., the possible use of contact forms, and the use of cookies on the website.

The corporate presentation website does not require user registration, placing an order, making an online payment, or providing delivery details.

Purchases, registration, payments, invoicing and delivery carried out through the okoscucc.hu online store are governed by a separate privacy policy.

2. Details of the Data Controller

Name of Data Controller: GetSmart Kft.
Registered office: 1016 Budapest, Sánc utca 5. ground floor, door 3, Hungary
Business premises / mailing address: 6728 Szeged, Dorozsmai út 35., District 2 inner area, 16890, Hungary
Tax number: 25445996-2-41
Company registration number: 01-09-395187
Representative: Tűzkő Barnabás Péter, Managing Director
E-mail: info@okoscucc.hu
Telephone: +36 70 668 5245

3. Principles of Data Processing

GetSmart Kft. processes personal data lawfully, fairly and transparently.

We process only personal data that is necessary for the relevant purpose. Personal data is retained only for as long as necessary to achieve the specified purpose and is protected by appropriate technical and organisational measures.

4. Data Processing Related to Contact Requests

If a visitor contacts GetSmart Kft. by e-mail, telephone or through a contact form, the following data may be processed:

  • name;
  • e-mail address;
  • telephone number;
  • content of the message;
  • any attachments submitted;
  • date and time of contact;
  • technical data recorded by the system, such as the IP address.

Purpose of data processing

The purposes of data processing are:

  • identifying the enquiry;
  • responding to the enquiry;
  • conducting business discussions;
  • preparing quotations;
  • preparing the conclusion of a contract;
  • documenting communications;
  • preparing or enforcing legal claims.

Legal basis for data processing

The legal basis for processing is:

  • Article 6(1)(b) GDPR, where processing is necessary in order to take steps at the visitor’s request prior to entering into a contract;
  • Article 6(1)(f) GDPR, meaning the legitimate interests of the Data Controller, where necessary for responding to enquiries, managing business communications, or protecting legal claims;
  • Article 6(1)(c) GDPR where processing is necessary for compliance with a legal obligation.

Submitting a contact request does not in itself constitute general consent to marketing communications. Separate, voluntary consent is required for advertising or newsletter communications.

Retention period

Data relating to an enquiry is processed until the enquiry has been concluded. After that, unless a legal claim, contractual relationship or statutory requirement justifies a longer retention period, the data will be deleted no later than 2 years thereafter.

Providing a telephone number is not mandatory unless the visitor requests a telephone callback.

5. Data Related to the Technical Operation of the Website

In connection with the secure operation of the website, the following technical data may be recorded:

  • IP address;
  • date and time of the visit;
  • URL of the page viewed;
  • browser and device information;
  • referring website;
  • debugging and security log data.

The purposes of processing are:

  • operating the website;
  • maintaining website security;
  • troubleshooting errors;
  • preventing misuse;
  • investigating technical issues.

The legal basis for this processing is Article 6(1)(f) GDPR, namely the legitimate interest of the Data Controller in ensuring the secure and proper operation of the website.

Technical data is processed only for as long as necessary for the above purposes or in accordance with the applicable retention rules of the website’s technical service providers.

6. Cookies and Similar Technologies

Cookies that are necessary for the operation of the website may be used to provide essential website functionality, security and to retain user preferences.

Statistical or marketing cookies, such as Google Analytics, Google Ads or Meta tracking technologies, are used only if they are actually enabled on the website and the visitor has given prior consent.

Visitors may refuse the use of non-essential cookies and may withdraw their consent at any time.

The cookie settings interface should provide the exact name, provider, purpose and retention period of the cookies actually used on the website.

Cookies may also be disabled or deleted through browser settings. If necessary cookies are disabled, certain website functions may not operate correctly.

7. External Links and Social Media

The website may contain links to external websites or social media platforms.

When a visitor opens an external link, they are redirected to the relevant service provider’s website, where the processing of personal data is governed by that provider’s own privacy policy.

If the website uses embedded content provided by an external service provider, such as a video, map, social media post or other external element, visitors will be provided with separate information regarding the related data processing.

8. Data Processors and Recipients

Personal data may be accessed by authorised employees of the Data Controller.

The following service providers may participate in data processing in connection with the operation of the website:

  • Shopify and the subprocessors used by Shopify;
  • the e-mail and hosting service providers used by GetSmart Kft.;
  • IT service providers, where they participate in operating the website;
  • Google or Meta service providers, only where such analytics or marketing tools are actually used on the website;
  • authorities, courts, accountants and legal advisers, where required by law or necessary for the enforcement of legal claims.

Depending on the nature of the relevant service, Shopify may act as a data processor in relation to visitor and contact data processed on behalf of GetSmart Kft.

Shopify’s Privacy Policy and Data Processing Addendum are available at:

https://www.shopify.com/legal/privacy
https://www.shopify.com/legal/dpa

9. Transfers Outside the European Economic Area

Certain service providers may process personal data in countries outside the European Economic Area.

In such cases, transfers are carried out subject to appropriate safeguards required by applicable data protection legislation, such as an adequacy decision, binding corporate rules or standard contractual clauses adopted by the European Commission.

10. Rights of Data Subjects

Data subjects have the right to:

  • request information about and access to their personal data;
  • request the rectification of inaccurate personal data;
  • request the erasure of their personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • request data portability where the applicable conditions are met;
  • withdraw consent at any time where processing is based on consent.

Requests may be submitted using the following contact details:

E-mail: info@okoscucc.hu
By post: 1016 Budapest, Sánc utca 5. ground floor, door 3, Hungary
Business premises / mailing address: 6728 Szeged, Dorozsmai út 35., District 2 inner area, 16890, Hungary
Telephone: +36 70 668 5245

We generally respond to requests within one month at the latest. Where necessary and subject to the conditions set out by law, this period may be extended by a further two months.

The Data Controller is entitled to verify the identity of the data subject before fulfilling a request.

11. Data Security

GetSmart Kft. applies appropriate technical and organisational measures to protect personal data, in particular against unauthorised access, alteration, loss or disclosure.

However, the complete security of data transmitted over the internet cannot be guaranteed.

In the event of a personal data breach, the Data Controller will act in accordance with the applicable legal requirements.

12. Lodging a Complaint

If a data subject believes that the processing of their personal data is unlawful, they may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.

Hungarian National Authority for Data Protection and Freedom of Information
(Nemzeti Adatvédelmi és Információszabadság Hatóság – NAIH)

1055 Budapest, Falk Miksa utca 9–11., Hungary
Mailing address: 1363 Budapest, P.O. Box 9, Hungary
E-mail: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu/

The data subject also has the right to seek judicial remedy.

13. Amendments to this Privacy Notice

The Data Controller reserves the right to amend this Privacy Notice.

Any amendments will be made available by publishing the updated version on the website.

Last updated: 17 September 2026