Privacy policy

1. The data controller

The details of the data controller are set out in the Imprint. In brief:

• Data controller: Simple Solutions Services Szolgáltató Kft. (7631 Pécs, Kultúrház utca 20., Hungary)
• Contact: iroda@simplesolutions.hu
• Hosting provider: Websupport Magyarország Kft. (Magyar Hosting), Fehérvári út 97-99., 1119 Budapest, Hungary, info@mhosting.hu

2. Data processing principles

Simple Solutions Services Kft. processes personal data exclusively on lawful grounds, for specified purposes and to the minimum extent necessary. Our data processing complies with:

• Regulation (EU) 2016/679 (GDPR)
• Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.)

In practice:

• Lawfulness: every processing activity has an appropriate legal basis (consent, performance of a contract, legitimate interest or legal obligation).
• Purpose limitation: data is used exclusively for the purposes defined in advance.
• Data minimisation: we process only the data strictly necessary for the purpose.
• Accuracy: we keep data accurate and up to date.
• Security: we protect data with technical and organisational measures.

3. What data we process

Contact via the website, by e-mail or phone

When you contact us via the website contact form, by e-mail or by phone, we process the following data:

Data	Purpose	Legal basis	Retention
Name	Identifying the enquiry, responding	Consent (GDPR Art. 6(1)(a))	2 years
E-mail address	Responding to the enquiry	Consent	2 years
Phone number	Responding to the enquiry	Consent	2 years
Company name	Context of the business enquiry	Consent	2 years
Message content	Processing the enquiry	Consent	2 years

Where a contractual relationship arises from the enquiry, the legal basis of processing becomes the performance of a contract (GDPR Art. 6(1)(b)), and the retention period is determined by accounting and tax obligations.

To prevent abuse of the contact form (for example mass automated submissions), we do not record your IP address; we only store a code derived from it with a secret key, for a short time (typically 24 hours).

Job applications

If you submit a job application, in addition to the above we process your CV and its contents (qualifications, professional experience, and other data provided in the CV).

Data scope	Purpose	Legal basis	Retention
CV and application data	Running the selection process	Consent (GDPR Art. 6(1)(a))	Until the selection process closes
CV — for later contact	Notification about future positions	Separate consent	Up to 1 year

Once the selection process closes, we delete the CV unless you separately consent to being contacted about future positions.

The website does not store applications in a database. The server forwards the data entered in the form and the attached CV by e-mail to the iroda@simplesolutions.hu mailbox. The CV is only present on the server temporarily, while it is being forwarded, and is deleted automatically afterwards. We send an automatic confirmation to the e-mail address you provide; it does not contain the text you entered in the form.

4. Cookies

Our website uses the following cookie categories:

Strictly necessary cookies

These cookies are required for the basic operation of the website (e.g. storing cookie consent).

Statistical cookies

They collect anonymous information about how the website is used — for example, which pages are the most popular. These are used only with your consent.

5. Third parties

We may transfer data to the following third parties — exclusively to the extent necessary to operate the service:

Recipient	Data scope	Purpose
Hosting provider (Websupport Magyarország Kft.)	Website logs, technical data; data entered in the contact form and the attached CV, until they are forwarded by e-mail	Hosting service, processing the contact form
E-mail provider (Microsoft Ireland Operations Ltd., Microsoft 365)	Data entered in the contact form and the attached CV; the e-mail address the confirmation is sent to	Delivering the messages and storing them in the mailbox
Accounting partner	Invoicing data	Compliance with legal obligations

We transfer personal data to third countries only subject to appropriate safeguards.

6. Retention

We retain data for the periods set out in the tables above. After the retention period expires, data is deleted or anonymised. Where a legal obligation applies (e.g. accounting records), the statutory retention period prevails.

7. Your rights

Under the GDPR you have the following rights:

• Right of access: you may request information about what data of yours we process.
• Right to rectification: you may request correction of inaccurate data.
• Right to erasure: you may request deletion of your data ("right to be forgotten").
• Right to restriction: you may request restriction of processing.
• Right to data portability: you may request your data in a machine-readable format.
• Right to object: you may object to processing based on legitimate interest.
• Withdrawal of consent: you may withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.

Right to lodge a complaint with the supervisory authority

If you believe the processing of your data violates the GDPR, you may lodge a complaint with the supervisory authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH) — 1055 Budapest, Falk Miksa utca 9-11., www.naih.hu.

8. Contact for data protection matters

For questions about data processing or to exercise your rights, you can reach us at iroda@simplesolutions.hu. We respond to every enquiry within 30 days at the latest.