Privacy Policy

The personal data provided by you is processed by:

VMI Mérnökiroda Kft.

1214 Budapest, II. Rákóczi Ferenc út 277.
11534543-2-43
hereinafter referred to as: Data Controller.


Please read our privacy notice (hereinafter referred to as: Notice) carefully, in which we describe our practices regarding the processing of your personal data in accordance with the General Data Protection Regulation (GDPR, i.e. Regulation 2016/679 of the European Parliament and of the Council). This Notice applies to persons (You) who use the services of the Data Controller as consumers. It describes how the Data Controller collects, uses, and in certain cases shares your personal data with third parties, as well as providing information about your "data subject" rights related to data processing.


The Data Controller (Imprint) is committed to protecting the personal data and privacy of individuals visiting this website. This notice and declaration is primarily about the confidential treatment and protection of personal data of customers and newsletter subscribers transmitted through the internet, however, website visitors are also included. We summarize how the owner may collect and use your data, and how it may be used. Data will not be transferred to unauthorized persons and will be used in the form specified in this notice.


In individual cases within contracts, the purpose of data processing may be modified under the conditions recorded in the given contract.


The notice provides important information to you regarding the protection of your personal data and your related rights. If the user does not accept these conditions, they have the right to suspend the use of the website and end browsing without providing personal data.


RESPONSIBILITY AND CONTACT OF THE DATA CONTROLLER:


Information on Data Processing


With regard to the data processing described in this Notice, VMI Mérnökiroda Kft. (registered office: 1214 Budapest, II. Rákóczi Ferenc út 277.) is the data controller (hereinafter referred to as: Data Controller).


For any comments, questions, or complaints regarding our data protection procedures, we can be reached via the following contact options:
VMI Mérnökiroda Kft. (registered office: 1214 Budapest, II. Rákóczi Ferenc út 277.)  or write to the vmi@vmi.hu email address.


Data Controller Responsibilities
VMI Mérnökiroda Kft.

1214 Budapest, II. Rákóczi Ferenc út 277.
11534543-2-43

Construction of residential and non-residential buildings


According to your choice, you are entitled to access our websites without providing your personal data, however, accepting the cookie policy is essential for browsing, and in case of newsletter subscription, the approval of the privacy policy and declaration is required. Personal data is any information that relates to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier. In the event that the Owner of the site collects your personal data, the data collection is carried out with transparent and confidential data management.


Your personal data is information by which your identity can be identified, for example: last name, first name, nationality, phone number, postal address, email address. Your personal data is collected when browsing the site in a voluntarily provided manner, with the owner indicating in each case the data that must necessarily be provided to achieve the purpose. If you do not wish to provide this data, you may not be able to access certain functions and services of the website. The collection of optionally specified data serves to understand user needs and to develop the website and services.


The Owner takes all measures to ensure that the personal data processed by them is accurate and up-to-date.


The following personal data is processed:

Requesting a quote:
● Last name, first name
● Email address
● Phone number
● Requested service and extra service
● Message
● System information (IP address, system version, resolution, statistics of pages viewed on the website, browsing habits, behavioral pattern)

Other additional data and information provided voluntarily by the user.

Duration of data processing:


● Regarding consents for direct marketing purposes, until the user's consent is withdrawn
● Regarding profile data, 4 years from the last login
● Regarding purchase data, 8 years based on Section 169 (2) of the Act on Accounting


Conditions of data transfer:


The Data Controller may transfer the data processed by it – to the extent necessary – to persons and companies designated by it operating in the following areas:


● Data processing
● Legal representation
● Bodies entitled by law to handle legal disputes
● Delivery
● Accounting
● Debt collection
● Marketing
● Invoicing


Data Processors:
Companies or individuals performing data processing or involved in data management


The owner, VMI Mérnökiroda Kft., performs the processing of data. In addition to the owner, other companies are also involved in the management and storage of the data of contractual customers.


Which companies are connected to the data processing?


Companies involved in data processing during the Owner's activities:


● The website provider: Framer B.V.
● Address: Netherlands, 1016 LZ Amsterdam, Rozengracht 207B
● Website: https://www.framer.com/
● Email address: support@framer.com

● Google Inc.: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, additional contact details, mail system, data and file storage in the cloud, online document management, as well as related services: Google Drive, Google Docs, Google Search Console, Google Analytics, Google AdSense, Google AdWords, YouTube, Blogger, Chrome browser support – Google privacy and privacy principles.


● Facebook Ireland Ltd.: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, supporting products, features offered by Facebook, Instagram, Messenger and Facebook – privacy policy and contact information of the data protection officer.


● Twitter International Company: One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND, use of products, features offered by Twitter – privacy policy and terms of service.


● In special cases, the contract may include additional data processing persons or companies.


Data Subject Rights and Enforcement
If you do not wish your personal data to be used for the communication of commercial offers, you have the right to prohibit this without justification. Your request for deletion must be sent to the Data Controller in writing, by email or by post, to the contact addresses indicated in the Imprint.


Protection of personal data of minors and persons with limited capacity:
The internet website of VMI Mérnökiroda Kft. as well as the content of its appearances are mostly not intended for minors under 13 years of age. We do not manage or collect personal data about children under 13 without verifiable parental or guardian consent. Parents or guardians may request the release or deletion of data relating to the child. If the age becomes apparent to the Data Controller during the process of data management or data processing, the data may be used for the purpose of obtaining parental consent.


The consent of a legal representative is required for the declaration of an incapacitated minor or a minor with limited capacity, with the exception of service parts that occur in large numbers in everyday life aimed at registration and do not require special consideration.


Management of Cookies:
We use "cookies" on our website. These are files that store information in your web browser. This requires your consent.
We use "cookies" in accordance with Act C of 2003 on Electronic Communications, Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services, and European Union regulations.
Websites operating within the countries of the European Union must request user consent for the use of "cookies" and for storing them on the user's computer or other device.


1. Cookie Policy
● This policy applies to the "cookies" of the https://vmikft.hu/ website.


2. What are "cookies"?
● "Cookies" are small files containing letters and numbers. A "cookie" is a tool for information exchange between the web server and the user's browser. These data files are not executable, do not contain spyware or viruses, and cannot access the users' hard drive contents.


3. What are "cookies" used for?
● Information sent by "cookies" makes web browsers easier to recognize, so users receive relevant and "personalized" content. Cookies make browsing more convenient, including online data security needs and relevant advertising. With the help of "cookies", website operators can also create anonymous statistics about the habits of website visitors. Using these, the editors of the page can further customize the appearance and content of the page.


4. What kind of "cookies" can you encounter?
● Websites can use two types of cookies:


Websites can use three types of cookies:


– Temporary "cookies", which remain on your device until you leave the website.
– Persistent "cookies", which remain on your device for a longer period depending on your web browser settings, or until you delete them.
– Third-party "cookies", placed in your browser by a third party (e.g. Google Analytics). These are placed in your browser if the website you are visiting uses services provided by the third party.


Essential session-id "cookies":
● Their use is essential for navigating the website and for the functions of the website to work. Without accepting these, the website or parts of it may not display at all or incorrectly.


Analytical or performance monitoring "cookies":
● These help us distinguish website visitors and collect data on how visitors behave on the website. With these "cookies" we ensure, for example, that the website remembers your login in cases requested by you. These do not collect information that can identify you; the data is stored in aggregate and anonymously. (e.g. Google Analytics)


Functional "cookies":
● The purpose of these cookies is to improve the user experience. They detect and store, for example, the device you used to open the website, or the data you previously provided and requested to be stored: for example, automatic login, chosen language, user changes made by you in text size, font, or other customizable elements of the website. These "cookies" do not track your activity on other websites. However, the information they collect may include personally identifiable information that you have shared.


Targeted or advertising "cookies":
● With the help of these, websites can provide information (marketing) that best suits your areas of interest. This requires your explicit consent. These cookies collect detailed information about your browsing habits.


5. Do "cookies" contain personal data?
● Most "cookies" do not contain personal information and cannot be used to identify users. The stored data is necessary for more comfortable browsing, and they are stored in such a way that unauthorized persons cannot access them.


6. Why are "cookies" important on the internet?
● The role of "cookies" is to make browsing more convenient for users, as it sets advertisements and content for users through browsing history. Disabling or limiting "cookies" makes some websites unusable. Disabled or restricted "cookies" do not mean that advertisements will not appear to users, only that the emerging Ads and content are not "personalized", i.e. they do not adapt to the user's needs and interests. Some examples of using "cookies":


– Displaying content, services, products tailored to the user's needs.
– Offers designed according to the user's interests.
– In the case requested by you, remembering the login (stay logged in).
– Remembering child protection filters on internet content (family mode options, safe search functions).
– Limiting the frequency of advertisements; i.e., numerical limitation of showing an advertisement to the user on a given website.
– Displaying advertisements relevant to the user.
– Geotargeting


7. Factors related to security and data safety.
● "Cookies" are not viruses or spyware. Because they are simple text type files, they cannot be executed, so they cannot be considered programs. However, it is possible that information is hidden in the "cookie" with other intent (malice), so they can function as spyware. Because of this, anti-virus and anti-spyware programs may continuously mark "cookies" for deletion.


● Since the device used for internet browsing and web servers communicate constantly, thereby sending data back and forth, if an attacker (hacker) intervenes in the process, they can extract the information stored by the "cookies". One reason for this can be, for example, improperly encrypted internet (WiFi) settings. Exploiting this gap, they can extract data from "cookies".


8. Managing and deleting "cookies"
● "Cookies" can be deleted or disabled in the browser programs used. Browsers allow the placement of "cookies" by default. This can be disabled in the browser settings and existing ones can be deleted. In addition, it can be set that the browser sends a notification to the user when sending a "cookie" to the device. However, it is important to emphasize that disabling or limiting these files worsens the browsing experience, and errors may occur in the functions of the website.


– Settings options are usually found in the "Options" or "Settings" menu of the browser. Every web browser is different, so for correct settings, please use the "Help" menu of your browser.


Definitions:
● Data Processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller


● Data Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction


● Data Transfer: making personal data processed by the Data Controller accessible to third parties


● Personal Data Breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed


● GTC: the General Terms and Conditions published on the website, containing the rules of product and service sales of the Data Controller


● Identifiable Natural Person: a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person


● Recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not


● Consent of the Data Subject: any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her


● Data Subject: any natural person identified or identifiable based on any information


● Users: visitors of the websites operated by the Data Controller, accessible at https://vmikft.hu/ and other addresses specified there


● Third Party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data


● Authority: National Authority for Data Protection and Freedom of Information (headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22/c., phone: 06-1 391-1400, fax: 06-1 391-1410, email: ugyfelszolgalat@naih.hu, website: naih.hu)


● Partner/Customer: a natural person who enters into a contract with the Data Controller for product sales or services, not on a website


● Registration: recording of personal data of the website user, with which a user account is created


● Personal Data: any information relating to the data subject


● Service: product sales and other services detailed in GTC, provided by the Data Controller to its Customers, Partners and Users on the website or otherwise


● Website: websites operated by the Data Controller, accessible at https://vmikft.hu/ and other addresses specified there

Online Payment and Stripe Payment Service

The settling of fees for paid services, packages, or orders available on the website can be done via secure online payment, through the Stripe payment system. During the payment process, the Data Controller processes data necessary for the fulfillment of the order, identification of payment, invoicing, performance of the contract, and handling of possible refunds.

Processed data may include in particular: name, email address, phone number, billing information, selected package or service, payment status, transaction ID, time of payment, amount paid, currency, IP address, as well as technical data required by the payment service provider for the secure processing of the transaction.

Credit card data is not stored directly by the Data Controller, and the Data Controller does not have access to full credit card numbers. The processing of card data takes place through Stripe's secure payment interface and system. Stripe may process personal data for conducting payment, fraud prevention, security checks, legal compliance, refunds, and handling payment disputes.

The legal basis for the processing of online payment data is the performance of the contract, or the fulfillment of the payment obligation associated with the order; in the case of billing and accounting data, the fulfillment of a legal obligation; in the case of abuse prevention and payment security, the legitimate interest of the Data Controller or the payment service provider.

More information on Stripe's data handling is available in Stripe's privacy policy and personal data center:
https://stripe.com/privacy
https://stripe.com/legal/privacy-center

Stripe as a payment data processor
● Name of service provider: Stripe Payments Europe, Ltd. / Stripe, Inc.
● Service: online credit card payment, processing of payment transactions, payment security, handling of refunds and payment disputes
● Website: https://stripe.com/
● Privacy notice: https://stripe.com/privacy
● Privacy center: https://stripe.com/legal/privacy-center