Privacy policy

Effective from 25 October 2026

1. The data controller

PMT East Kereskedelmi Kft. · Registered office: 1188 Budapest, Tölgy u. 5/B III. 11., Hungary · Company registration number: 01-09-446783 · Tax number: 29169676-2-43 · E-mail: pekarik.janos@pmtgep.hu · Phone: +36 30 639 5826 · Website: https://pmtgep.hu

2. Legal background

Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Hungarian Act CXII of 2011 on the right to informational self-determination and on the freedom of information (Infotv.), and Hungarian Act CVIII of 2001 on electronic commerce services.

3. Individual data processing activities

3.1. Quote requests and contact form

Data processed: name, company name, e-mail address, phone number, the subject and text of the enquiry, the time of submission, and an irreversible digest (hash) derived from the IP address.
Purpose: answering the enquiry, giving a quote, keeping in contact.
Legal basis: steps taken at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR). For the IP digest, the legitimate interest of the controller in preventing abuse and unsolicited submissions (Article 6(1)(f) GDPR).
Retention: 1 year from closing the enquiry. If a contract is concluded, until the limitation period of claims arising from the contract (5 years), and accounting documents for 8 years as required by the Hungarian Accounting Act.
The controller receives an e-mail notification of the submission, and the sender receives an automatic confirmation e-mail.

3.2. Contact by e-mail and phone

Data processed: name, e-mail address, phone number, content of the correspondence.
Purpose: keeping in contact, handling matters.
Legal basis: preparation or performance of a contract (Article 6(1)(b) GDPR), otherwise the legitimate interest of the controller (point (f)).
Retention: 5 years from closing the matter.

3.3. Cookies and similar technologies

Strictly necessary: storing your cookie choice in the browser (pmt-cookie-consent, until changed or deleted), and the technical cookies of the hosting provider required for operation (for example session-id, __dpl). Legal basis: legitimate interest, or necessary for providing the service.
Analytics and marketing cookies, only with consent: Google Analytics 4 (_ga 2 years, _ga_T5E0CSGFBZ 2 years, _gid 24 hours, _gat_* 1 minute); Google Ads conversion tracking and remarketing (_gcl_au 90 days). These are loaded by Google Tag Manager, and only after the “Accept” button is pressed. Legal basis: consent (Article 6(1)(a) GDPR).
Consent can be withdrawn at any time using the “Cookie settings” link in the footer. Withdrawal does not affect the lawfulness of earlier processing.

4. Processors and recipients

Lovable Labs Incorporated (https://lovable.dev). EU contact: Lovable Labs Sweden AB, Regeringsgatan 25, 111 53 Stockholm, Sweden, privacy@lovable.dev. Task: hosting the website, storing form data and sending the notification and confirmation e-mails. The form data database is located in Switzerland (Zurich); Switzerland is covered by an adequacy decision of the European Commission. Any further transfer outside the EEA (for example to the USA) takes place on the basis of the European Commission’s standard contractual clauses (SCC).
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Task: Google Tag Manager, Google Analytics 4, Google Ads. Only with consent.
Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Task: corporate e-mail service (Microsoft 365).

The controller does not sell personal data. There is no automated decision-making; Google Ads remarketing may create advertising audiences, but only with consent.

5. Data security

The controller and its processors use encrypted (HTTPS) connections, access restrictions and logging. Only authorised staff have access to the data.

6. Rights of the data subject

Information and access (Article 15 GDPR).
Rectification (Article 16).
Erasure (Article 17).
Restriction of processing (Article 18).
Data portability (Article 20).
Objection to processing based on legitimate interest (Article 21).
Withdrawal of consent.

You can send your request to pekarik.janos@pmtgep.hu; we will reply within one month at the latest.

7. Remedies

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; e-mail: ugyfelszolgalat@naih.hu; https://naih.hu. You may also go to court; the action may also be brought before the regional court of your place of residence or stay.

8. Amendments

The controller may amend this notice; the current version is always available on this page.