H-Lab Informatikai Kft.

Legal

Privacy Policy

Last updated: June 2026

Introduction

H-Lab Informatikai Kft. is committed to protecting your privacy and the security of your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the General Data Protection Regulation (GDPR – Regulation 2016/679/EU) and the Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Infotv.).

Data Controller

H-Lab Informatikai Kft.
6722 Szeged, Kálvária sgt. 24.
Tax ID: 14909816-2-06
VAT ID: HU14909816
Email: info@h-lab.eu

Legal Basis for Processing

We process personal data only where we have a lawful basis under GDPR Article 6. The following summarises each processing activity, the personal data involved, the legal basis, and the applicable retention period.

  • Contact form enquiries – Data: name, email address, message content. Legal basis: Article 6(1)(b) – processing is necessary for steps taken prior to entering into a contract at your request. Retention: 2 years from last contact.
  • Service delivery and client contracts – Data: contact details and project-related data. Legal basis: Article 6(1)(b) – processing is necessary for the performance of a contract. Retention: 8 years (required by Hungarian Act C of 2000 on Accounting).
  • Language preference – Data: a single browser localStorage value (‘en’ or ‘hu’). This value does not constitute personal data and does not require a legal basis. Retention: until cleared by the user.

We do not use automated decision-making or profiling as described in GDPR Article 22. No decision with a legal or similarly significant effect on you is made automatically.

Information We Collect

We collect information you voluntarily provide when you:

  • Contact us through the website contact form
  • Send us an email
  • Engage with us as a client or prospective business partner

The categories of personal data we may collect include:

  • Name and contact details (email address, telephone number)
  • Company name and job title
  • Message content
  • Technical data automatically transmitted by your browser (IP address, browser type, device information)

How We Use Your Information

We use your personal data for the following purposes:

  • To respond to your enquiries and provide support
  • To deliver our services and fulfil contractual obligations
  • To comply with legal obligations and defend our legal rights

We do not use your personal data for direct marketing without your prior explicit consent.

Cookies and Browser Storage

This website uses minimal browser storage:

  • Language preference (localStorage): We store the key ‘h-lab-lang’ in your browser’s localStorage to remember your chosen interface language. This value is not a cookie, is never transmitted to any server, and does not constitute personal data.
  • No analytics or tracking cookies: This website does not currently use Google Analytics or any other tracking technology. No cookies are placed on your device beyond what your browser requires to load the page.

If analytics are introduced in the future, this policy will be updated and your explicit consent will be requested before any tracking is activated.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, unless a longer period is required or permitted by law:

  • Contact form enquiries: 2 years from last contact
  • Client and project data: 8 years (Hungarian Act C of 2000 on Accounting)
  • Language preference (localStorage): until cleared by the user

Your Rights

Under the GDPR and the Hungarian Infotv., you have the following rights regarding your personal data:

  • Right to Access (Art. 15): Request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16): Ask us to correct inaccurate or incomplete data.
  • Right to Erasure (Art. 17): Request deletion of your data where there is no overriding legal basis for retention.
  • Right to Restriction of Processing (Art. 18): Ask us to limit how we use your data in certain circumstances.
  • Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21): Object to processing based on our legitimate interests.
  • Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right not to be subject to automated decision-making (Art. 22): We do not make automated decisions that produce legal or similarly significant effects on you.
  • Right to lodge a complaint (Art. 77): You have the right to lodge a complaint with the Hungarian supervisory authority (NAIH) if you consider that processing of your personal data infringes the GDPR or Infotv. See the Contact section for NAIH details.

To exercise any of the above rights, please contact us at info@h-lab.eu. We will respond within one month of receiving your request. For complex or numerous requests this period may be extended by a further two months; we will notify you in such cases.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction:

  • Encrypted data transmission (HTTPS/TLS)
  • EU-based secure server infrastructure (tarhely.eu, Hungary)
  • Access controls and the need-to-know principle
  • Regular security reviews and software updates

Data Sharing and Third-Party Processors

We do not sell, trade, or rent your personal data to third parties. We share data only with the following categories of recipient:

  • Formspree Inc. (1 Liberty St, Floor 12, New York, NY 10006, USA) — We use Formspree to deliver contact form submissions to our email inbox. Your name, email address, and message content are transferred to Formspree’s servers in the United States. This transfer is governed by Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4. X. em. 241., Hungary) — Our website hosting provider. Server logs may contain IP addresses. Tárhely.eu is an EU-based processor; no cross-border transfer occurs.
  • Competent authorities: We may disclose personal data to courts, law enforcement agencies, or other public authorities where required by applicable law or necessary to protect our legal rights.

All third-party processors are bound by data processing agreements (DPAs) and are contractually required to protect your data and process it only as instructed.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be indicated by an updated effective date at the top of this page. We encourage you to review this Policy periodically.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

H-Lab Informatikai Kft.
6722 Szeged, Kálvária sugárút 24.
Email: info@h-lab.eu

You also have the right to lodge a complaint with the Hungarian supervisory authority for data protection:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9-11., Hungary
Email: ugyfelszolgalat@naih.hu
Phone: +36 (1) 391-1400
Website: www.naih.hu