Datenschutzerklärung
Effective from 15 October 2026
Die deutsche Fassung wird derzeit vorbereitet. Nachfolgend finden Sie die englische Fassung; maßgeblich ist die ungarische Fassung.
Inox Factory Kft. (the "Controller") is committed to protecting the personal data of visitors to its website (https://www.inox-factory.com), its customers, partners and job applicants. This notice explains how we process personal data under Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Hungarian Act CXII of 2011 on informational self-determination and freedom of information. In case of discrepancy, the Hungarian version prevails.
1. Controller
- Name: Inox Factory Korlátolt Felelősségű Társaság (Inox Factory Kft.)
- Registered office: 1111 Budapest, Lágymányosi utca 12. földszint 2., Hungary
- Site: 4100 Berettyóújfalu, Téglapart utca hrsz. 5793/3, Hungary
- Company registration number: 01-09-194406
- Tax number: 13899783-2-43
- Represented by: Szarvas Norbert Mihály, Managing Director
- E-mail: [email protected]
- Phone: +36 70 414 3194
The Controller is not required to appoint a Data Protection Officer under Article 37 GDPR. Please contact us at the details above with any data protection questions.
2. Enquiries and quote requests
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, company, e-mail, phone number, message content, uploaded attachments (e.g. technical drawings) | Answering enquiries, preparing quotations, communication | Steps prior to entering into a contract, Art. 6(1)(b) GDPR; for company contact persons, legitimate interest, Art. 6(1)(f) GDPR | If no contract is concluded: 1 year from the last contact. If a contract is concluded: 5 years after its termination (general limitation period); accounting documents: 8 years |
3. Job applications and dual training
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, contact details, data in the CV and cover letter (education, experience, qualifications) | Selection, assessment of suitability, preparation of an employment contract | Steps prior to entering into a contract, Art. 6(1)(b) GDPR | Deleted without delay after an unsuccessful application is decided |
| The same data for future positions | Talent pool, future contact | Explicit consent, Art. 6(1)(a) GDPR | Until consent is withdrawn, max. 1 year |
4. Cookies and web analytics
The website uses Google Analytics 4 and Google Tag Manager to measure traffic. These set cookies and transmit pseudonymised data (pages viewed, device and browser type, approximate location, truncated IP address) to Google.
Legal basis: your consent (Art. 6(1)(a) GDPR). Google services are only loaded if you click "Accept" in the banner shown on your first visit. You can withdraw consent at any time via "Cookie settings" at the bottom of the page, after which the statistics cookies are deleted.
Your choice is stored in your browser's local storage (key "inox_cookie_consent"). This is strictly necessary, contains no personal data and is not transmitted.
Embedded YouTube videos: initially only a preview image served from our own server is shown, and no data reaches YouTube (Google). Only when you click the play button is the video loaded in YouTube's privacy-enhanced mode (youtube-nocookie.com); Google then receives your IP address and technical browser data and may store data required for playback in your browser. Legal basis: your consent given by clicking (Art. 6(1)(a) GDPR).
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| _ga | Distinguishing visitors (statistics) | 2 years | |
| _ga_<id> | Persisting session state (statistics) | 2 years | |
| inox_cookie_consent (localStorage) | INOX Factory | Remembering your cookie choice (necessary) | Until withdrawn |
5. Server logs
When serving the website, the server keeps technical logs (IP address, time of request, requested page, browser type) to operate the service securely and detect abuse, based on our legitimate interest (Art. 6(1)(f) GDPR). Retention: up to 30 days, after which logs are deleted automatically.
6. Processors and recipients
Only authorised staff of the Controller can access the data. The website is hosted on the Controller's own server; no external hosting provider is used. We use the following processors:
| Processor | Activity | Transfer |
|---|---|---|
| Zoho Corporation B.V. (Beneluxlaan 4B, 3527 HT Utrecht, Netherlands) | E-mail service (delivery of form messages) | Within the EU |
| Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) | Content delivery and website protection (DNS, CDN) | USA – EU–US Data Privacy Framework |
| Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) | Web analytics (Google Analytics, Tag Manager); video playback (YouTube – on click only) | USA – EU–US Data Privacy Framework |
7. Data security
We protect personal data with appropriate technical and organisational measures against unauthorised access, alteration, disclosure, deletion or destruction. The website is served over an encrypted (HTTPS) connection, and only authorised staff can access the data.
8. Your rights
- Access to your personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on legitimate interest (Art. 21)
- Withdrawal of consent at any time, without affecting prior lawful processing (Art. 7(3))
Send your request to [email protected]. We respond without undue delay and within one month at the latest.
9. Remedies
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11; postal address: 1363 Budapest, Pf. 9; phone: +36 1 391 1400; e-mail: [email protected]; www.naih.hu — or with the supervisory authority of your EU country of residence. You may also bring proceedings before a court.
10. Changes
We may update this notice. The current version is always available on this page.