Privacy Policy

Effective date: 30. October 2026

1. General Principles and Data Controller

The protection of personal data is of particular importance to Belora Tech Kft. The primary purpose of the website is to establish business relationships with companies interested in the company’s engineering services and to receive requests for quotations.

The website can be visited without providing personal data. However, if you contact us or submit a request for quotation, we process the personal data necessary to respond to your enquiry.

As data controller, Belora Tech Kft. takes appropriate technical and organisational measures to protect the personal data it processes. However, data transmission over the internet always involves security risks, and therefore complete protection cannot be guaranteed.

Data controller details:

Questions and requests relating to data processing may be sent to the e-mail address above.

2. Definitions

We want this Privacy Policy to be understandable to our clients, partners and website visitors alike. Therefore, we briefly explain the terms used in this document. These terms have the meanings defined in Article 4 of the GDPR.

2.1. Personal data: any information relating to an identified or identifiable natural person (the “data subject”). An identifiable natural person is someone who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data or an online identifier (for example, an IP address).

2.2. Data subject: an identified or identifiable natural person whose personal data is processed by the data controller.

2.3. Processing: any operation or set of operations performed on personal data, whether or not by automated means. Examples include collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, transmission, alignment, restriction, erasure or destruction.

2.4. Restriction of processing: the marking of stored personal data with the aim of limiting its processing in the future.

2.5. Data controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. For the purposes of this Privacy Policy, the data controller is Belora Tech Kft.

2.6. Data processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.

2.7. Recipient: a natural or legal person, public authority, agency or other body to whom personal data is disclosed, whether or not they are a third party. Public authorities which may receive personal data in the context of a particular inquiry in accordance with Union or Member State law are not considered recipients.

2.8. Third party: a natural or legal person, public authority, agency or other body other than the data subject, the data controller, the data processor, or persons who, under the direct authority of the data controller or data processor, are authorised to process personal data.

2.9. Consent: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

3. Website Visits and Technical Log Files

When the website is accessed, the hosting provider’s web server may automatically record technical data. This may include, in particular, the IP address, the date and time of the request, the page accessed, and information about the browser and operating system.

Purpose of processing: ensuring the operation of the website, identifying technical errors and investigating security incidents.

Legal basis: Article 6(1)(f) of the GDPR, namely the legitimate interest in ensuring the secure and stable operation of the website.

Retention period: technical log data is retained by the hosting provider for 30 days, after which it is deleted.

4. Request for Quotation Form and E-mail Enquiries

If you contact us through the request for quotation form available on the website or by e-mail, we process the personal data you provide in order to respond to your enquiry, discuss project requirements and prepare a quotation, where applicable.

This processing also applies to business contact persons whose personal data is included in the enquiry.

Categories of personal data processed:

• name;
• company name;
• e-mail address;
• telephone number, if provided;
• project description, relevant dates and other information included in the message;
• data contained in files attached to the enquiry.

Purpose of processing: responding to enquiries, discussing project requirements and preparing quotations.

Legal basis:

• In the case of a request for quotation, Article 6(1)(b) of the GDPR: taking steps at the request of the data subject prior to entering into a contract.
• If the enquiry does not relate to a request for quotation (for example, a general professional enquiry), the legal basis is Article 6(1)(f) of the GDPR: our legitimate interest in responding to incoming business and professional enquiries.

Submitting a request for quotation does not, in itself, create a contract between Belora Tech Kft. and the person submitting the request. Assignments are undertaken on the basis of individual agreements and contracts.

Providing data is voluntary. However, if contact details are not provided, we may be unable to respond to the enquiry or prepare a quotation.

Please do not include personal data relating to other individuals in the project description unless such data is necessary for the enquiry.

Messages submitted through the form are received by e-mail, and a copy of the message text is also stored in the website database. Attached files are forwarded by e-mail and are not retained on the website hosting server.

Retention period:

If the enquiry does not result in a contract, we retain the data for a maximum of 12 months from the date of the last contact, both in the e-mail account and in the website database. After this period, the data is deleted unless further retention is justified by a legal obligation or by the establishment, exercise or defence of legal claims.

If a contract is concluded, the related data is processed in accordance with the statutory retention requirements applicable to the relevant processing activity.

Accounting documents subject to the Hungarian Accounting Act are retained for the period prescribed by law, generally for at least 8 years. This does not mean that every request for quotation or the entire correspondence is retained for 8 years.

5. Data Processors and Data Transfers

The following service providers participate in the operation of the website and related electronic communications as data processors.

Hosting provider:

Hostinger International Ltd.
61 Lordou Vyronos, Lumiel Building, 4th floor, 6023 Larnaca, Cyprus.

E-mail service provider:

Microsoft Ireland Operations Ltd.
One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Service: Microsoft 365.

The service providers process personal data on behalf of Belora Tech Kft., to the extent necessary to provide their services, under data processing agreements. The service providers may also engage further data processors (sub-processors).

In connection with Microsoft’s services, personal data may also be transferred to recipients outside the European Economic Area or made accessible to such recipients. Such transfers may take place only where the conditions set out in Chapter V of the GDPR are met, on the basis of a transfer mechanism actually applicable to the recipient concerned. Such mechanisms may include an adequacy decision of the European Commission or the European Commission’s Standard Contractual Clauses.

We do not sell personal data or disclose it to third parties for advertising purposes.

6. Cookies

The public-facing website does not use analytics, tracking or marketing cookies.

The website uses only the following cookie to remember the language setting:

pll_language

• Purpose: remembering the language selected by the visitor so that the website is displayed in the same language during subsequent visits.
• Expiry: up to 1 year.

WordPress login cookies are used exclusively for website administrators to maintain their authenticated sessions.

Cookies may be deleted or disabled at any time through your browser settings. In this case, your language preference will not be remembered for your next visit.

7. Other Technologies and Services

The fonts used on the website are hosted on our own server. Therefore, loading them does not involve the transfer of data to an external font service provider.

The website does not contain social media plugins, embedded videos or maps.

We use Google Search Console to examine how the website appears in Google Search. We do not use Google tracking code on the website to track visitors.

8. Rights of Data Subjects

Under the GDPR, you are entitled to exercise the following rights, subject to the conditions laid down by law:

• Right of access (Article 15): you may request information as to whether we process your personal data and request access to that data.
• Right to rectification (Article 16): you may request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Article 17): you may request the erasure of your personal data in the circumstances specified in the GDPR.
• Right to restriction of processing (Article 18): you may request the restriction of processing under the conditions set out in the GDPR.
• Right to data portability (Article 20): where the conditions set out in the GDPR are met, you may request the personal data you have provided to us, processed by automated means, in a structured, commonly used and machine-readable format, or request its transmission to another data controller.
• Right to object (Article 21): you may object, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interests.

To exercise your rights, please contact us at rudolf.bartus@beloratech.com.

We respond to requests without undue delay and, as a general rule, within one month of receipt. Where justified, this period may be extended by a further two months in accordance with the GDPR. In such cases, we will inform the requester of the extension within the first month.

9. Complaints and Legal Remedies

If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

If your rights have been infringed, you may also seek a judicial remedy under the conditions set out in Article 79 of the GDPR.

10. Automated Decision-Making and Amendments to this Privacy Policy

No automated decision-making or profiling takes place in connection with requests for quotation submitted through the website.

We may amend this Privacy Policy if the operation of the website, the circumstances of data processing or the applicable legal requirements change. The current version is available on the website.

This Privacy Policy is available in Hungarian, English and German. In the event of any discrepancy, the Hungarian version shall prevail.