Privacy Policy

Effective from: 1 July 2026

1. Details of the Data Controller

AMBELKO Építőipari Korlátolt Felelősségű Társaság, hereinafter referred to as the “Data Controller” or “AMBELKO”, is committed to the protection of personal data and processes personal data in accordance with the applicable data protection laws.

Details of the Data Controller:

Company name: AMBELKO Építőipari Korlátolt Felelősségű Társaság
Abbreviated name: AMBELKO Kft.
Registered office: 1141 Budapest, Bosnyák utca 48–50, Building A, 2nd floor, Door 4
Company registration number: 01-09-260545
Tax number: 10801929-2-42
E-mail: info@ambelko.hu
Website: www.ambelko.hu

The purpose of this Privacy Notice is to present what personal data the Data Controller processes in connection with the use of the website and contact requests, for what purpose, on what legal basis, and for how long.

2. Technical Data Processing Related to Visiting the Website

When visiting the website, the IT systems ensuring the operation of the website may automatically record certain technical data.

The processed data may include, in particular:

  • IP address;

  • date and time of the visit;

  • visited pages and subpages;

  • type of browser and operating system used;

  • other technical data relating to the device and the session.

Purpose of data processing: to ensure the secure and proper operation of the website, to maintain IT security, and to detect and prevent possible errors and abuses.

Legal basis of data processing: the legitimate interest of the Data Controller in ensuring the secure and proper operation of the website.

Duration of data processing: the technical retention period determined by the hosting provider or the Data Controller, but no longer than 90 days, unless longer retention becomes necessary due to a security incident or legal claim.

3. Contact by E-mail or Contact Form

If a website visitor contacts AMBELKO by e-mail or through the contact form available on the website, the Data Controller processes the personal data necessary to respond to the inquiry.

The scope of processed data may include, in particular:

  • name;

  • e-mail address;

  • telephone number, if provided by the data subject;

  • company name, if provided by the data subject;

  • subject and content of the inquiry;

  • any other personal data voluntarily provided by the data subject.

Purpose of data processing: receiving and responding to inquiries, maintaining contact, and, where applicable, preparing a business or contractual relationship.

Legal basis of data processing:

  • in the case of general inquiries, the legitimate interest of the Data Controller in responding to incoming inquiries and maintaining business contacts;

  • in the case of inquiries prior to the conclusion of a contract, taking steps at the request of the data subject prior to entering into a contract;

  • where data processing is necessary to comply with a legal obligation, compliance with a legal obligation applicable to the Data Controller.

Duration of data processing: no longer than 1 year after the closure of the given inquiry, unless the inquiry results in a contractual relationship, or further retention of the data is justified by a legal obligation or the enforcement of legal claims.

Please provide only such personal data in your inquiry that is truly necessary for handling the given matter.

4. Requests for Quotation and Business Inquiries

If a natural person requests a quotation from AMBELKO in their own name or on behalf of an organisation, or contacts the company for the purpose of business cooperation, the Data Controller processes the personal data necessary for preparing the quotation and managing the business relationship.

The scope of processed data may include, in particular:

  • name;

  • position;

  • name of the represented organisation;

  • business e-mail address;

  • telephone number;

  • content of the inquiry and the quotation;

  • other data necessary for business contact.

Purpose of data processing: providing quotations, establishing and maintaining business relationships, preparing the conclusion of contracts, and maintaining contact.

Legal basis of data processing: the legitimate interest of the Data Controller in establishing and maintaining business relationships, and, in the case of a contract to be concluded with a natural person, taking steps prior to entering into a contract.

Duration of data processing: in the case of an unsuccessful quotation or cooperation that does not materialise, as a general rule, 1 year from the closure of the quotation or business inquiry; in the case of a concluded contract, for the period specified in the applicable laws and the internal data processing rules of the Data Controller.

5. Use of Cookies

The website may use cookies to ensure its proper operation. A cookie is a small data file placed by the website on the visitor’s device.

5.1. Strictly Necessary Cookies

These cookies are necessary for the basic and secure operation of the website. Without them, the website or certain functions of the website would not operate properly.

The use of strictly necessary cookies does not require the user’s prior consent.

5.2. Statistical and Analytical Cookies

If the website uses traffic measurement or analytical services, such cookies may help the Data Controller obtain information, among other things, about website traffic, visitors’ movement within the website, and the most frequently viewed content.

The use of such cookies — where they involve the processing of personal data or store information on, or access information from, the data subject’s device — takes place exclusively on the basis of the visitor’s prior consent.

5.3. Marketing Cookies

If the website uses cookies for marketing, social media, or advertising purposes, such cookies may be used exclusively on the basis of the visitor’s prior consent.

The user may withdraw or modify their consent to non-essential cookies at any time through the cookie settings available on the website.

The detailed list of cookies actually used on the website — including their names, providers, purposes, and lifetimes — must be indicated on the website’s cookie settings interface or in a separate Cookie Notice.

6. Data Processors and External Service Providers

The Data Controller may use data processors and other external service providers for the operation of the website and the performance of data processing operations.

Such service providers may include, in particular:

Hosting provider:
Name: Rackhost Zrt.
Registered office: 6722 Szeged, Tisza Lajos körút 41.
Service: providing hosting and technical infrastructure for the website.

Website developer or website maintenance provider:
Name: Ambelko Kft.
Service: development, maintenance, and technical support of the website.

Analytics service provider:

The Data Controller only uses data processors that provide appropriate guarantees for the lawful and secure processing of personal data.

7. Data Transfers to Third Countries

If the Data Controller uses a service under which personal data may be transferred to a third country outside the European Economic Area, such transfer may take place only on a legal basis and with appropriate safeguards in accordance with the provisions of the GDPR.

Depending on the external service providers actually used, the details of any possible data transfers to third countries must be indicated in this Privacy Notice or in the Cookie Notice.

8. Rights of Data Subjects

In relation to data processing, the data subject has the right to:

  • request information and access to the processing of personal data concerning them;

  • request the rectification of inaccurate personal data;

  • request the erasure of their personal data in the cases specified by law;

  • request the restriction of data processing;

  • exercise their right to data portability in the cases specified by law;

  • object to data processing based on legitimate interest;

  • withdraw their consent at any time in the case of data processing based on consent, without affecting the lawfulness of processing carried out before the withdrawal.

If the data processing is based on the legitimate interest of the Data Controller or a third party, the data subject may object at any time, on grounds relating to their particular situation, to the processing of their personal data. In this case, the Data Controller may no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or which are related to the establishment, exercise, or defence of legal claims.

The data subject may submit their request using the following contact details:

E-mail: info@ambelko.hu

The Data Controller responds to data subject requests without undue delay and, as a general rule, no later than one month from receipt of the request.

9. Legal Remedies

If the data subject believes that the processing of their personal data violates the applicable data protection laws, they may lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Registered office: 1055 Budapest, Falk Miksa utca 9–11.
Mailing address: 1363 Budapest, P.O. Box 9.
Website: www.naih.hu
E-mail: ugyfelszolgalat@naih.hu

The data subject is also entitled to bring proceedings before a court in the event of unlawful processing of their personal data or infringement of their rights related to data processing.

10. Data Security

The Data Controller applies appropriate technical and organisational measures to protect personal data, among other things, against unauthorised access, alteration, disclosure, erasure, destruction, or accidental loss.

The Data Controller restricts access to personal data to those persons for whom knowledge of the data is necessary for the performance of their duties.

11. Amendment of this Notice

The Data Controller is entitled to amend this Privacy Notice in the event of changes to the applicable laws, the operation of the website, the technologies used, or the data processing activities.

The currently effective Privacy Notice is available on the website.

Date of last amendment: 9 July 2026