Privacy Policy

1. Introduction

ilussoepito.hu (hereinafter: the Website) is operated by Ilusso Építő Kft. (hereinafter: the Data Controller). By publishing this Privacy Statement and Data Processing Notice (hereinafter: the Privacy Statement), the Data Controller sets out the principles governing its processing of personal data, which it recognises as binding upon itself. The Data Controller takes all measures that can reasonably be expected of it to ensure the security of the personal data it processes.

Please read this Privacy Statement before using our Website. It explains in plain terms how we handle your personal data. In this Privacy Statement, the Data Controller clearly and in detail informs data subjects of all important facts relating to the processing of their data.

In operating the Website, the Data Controller processes the data of persons who register on the site in order to provide them with an appropriate service. The service provider intends to comply fully with the legal requirements on the processing of personal data, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council.

This privacy notice has been prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, having regard to Act CXII of 2011 on the right to informational self-determination and on freedom of information.

Service provider / data controller: name and contact details

Name: Ilusso Építő Kft.
Registered office: 1065 Budapest, Bajcsy-Zsilinszky út 15. A. ép. 2. em. 1.
Tax number: 27454086-2-42
Website: ilussoepito.hu
E-mail: info@ilusso.hu
Phone: +36 30 595 1753

2. Definitions

• personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
• data subject: any natural person who is identified, or who can be identified directly or indirectly, on the basis of specific personal data;
• consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
• controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
• processing: any operation or set of operations performed on data, regardless of the method used, in particular collection, recording, organisation, storage, alteration, use, retrieval, transmission, disclosure, alignment or combination, blocking, erasure and destruction, as well as preventing further use of the data, taking photographs, audio or video recordings, and recording physical characteristics suitable for identifying a person (e.g. fingerprints or palm prints, DNA samples, iris images);
• erasure: making data unrecognisable in such a way that it can no longer be restored;
• processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
• technical data processing: the performance of technical tasks related to processing operations, irrespective of the method and means used and the place of application, provided that the technical task is performed on the data;
• data set: the totality of data managed in a single register;
• personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;
• recipient: a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
• third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
• information society service: a service provided electronically, at a distance, normally for remuneration, which the recipient of the service accesses individually;
• electronic commerce service: an information society service the purpose of which is the commercial sale, purchase, exchange or other use of a marketable movable item that can be taken into possession (including money and securities, as well as natural forces that can be used as things), a service, real estate or a right of pecuniary value (hereinafter together: goods);
• GDPR (General Data Protection Regulation): the European Union's General Data Protection Regulation.

3. Users

A user is any natural person, whether registered on the site or not, who uses the services of the Website and who is identified, or can be identified directly or indirectly, on the basis of specific personal data.

4. Data processing principles

The Data Controller declares that it processes personal data as set out in this privacy notice and complies with the applicable legislation, with particular regard to the following:

• Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.
• Personal data may only be collected for specified, explicit and legitimate purposes.
• The purpose of processing personal data shall be adequate and relevant, and processing shall be limited to what is necessary.
• Personal data shall be accurate and kept up to date. Inaccurate personal data shall be erased without delay.
• Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary. Personal data may be stored for longer periods only insofar as they are processed for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
• Personal data shall be processed in a manner that ensures appropriate security of the personal data, using appropriate technical or organisational measures, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
• The principles of data protection shall apply to any information concerning an identified or identifiable natural person.

5. Key information on data processing

• Purpose of processing: keeping in contact, providing information and additional services.
• Legal basis of processing: the consent of the data subject.
• Data subjects concerned: registered users of the website (newsletter subscribers and persons making enquiries via the form).
• Duration of processing and erasure of data: the duration of processing always depends on the specific purpose of use, but the data must be erased without delay once the original purpose has been achieved. The data subject may withdraw consent to processing at any time by sending a message to the contact e-mail address. If there is no legal obstacle to erasure, the data will then be erased.
• Persons entitled to access the data: the Data Controller and its employees.
• The data subject may request from the Data Controller access to, rectification or erasure of personal data concerning him or her, or restriction of their processing, and may object to the processing of such personal data; the data subject also has the right to data portability.
• The data subject may withdraw consent to processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• The data subject has the right to lodge a complaint with the supervisory authority.
• If the data subject wishes to use the benefits of registration, i.e. the related services of the website, the requested personal data must be provided. The data subject is not obliged to provide personal data, and failure to do so will not have any adverse consequences. However, certain functions of the website cannot be used without registration.
• The data subject has the right to obtain from the Data Controller, without undue delay, the rectification or completion of inaccurate personal data concerning him or her.
• The data subject has the right to obtain from the Data Controller the erasure of inaccurate personal data concerning him or her without undue delay, and the Data Controller is obliged to erase personal data concerning the data subject without undue delay where there is no other legal basis for the processing.
• Modification or erasure of personal data may be requested by e-mail, by phone or by post using the contact details given above.

6. Completing the quotation request form on the website

The Data Controller uses the data obtained through the quotation request form on the website exclusively for the purposes of keeping in contact and providing information.

Responsible for data processing:

Name: Ilusso Építő Kft.
Registered office: 1065 Budapest, Bajcsy-Zsilinszky út 15. A. ép. 2. em. 1.
Tax number: 27454086-2-42
Website: ilussoepito.hu
E-mail: info@ilusso.hu
Phone: +36 30 595 1753

7. Sending newsletters

As the operator of the website, we declare that we fully comply with the relevant legal provisions in the information and descriptions we publish. We further declare that, when you subscribe to the newsletter, we are not in a position to verify the authenticity of the contact details provided, nor to determine whether the data provided relate to a private individual or a business. Businesses that contact us are treated as client partners.

The purpose of processing is to send professional information, electronic messages containing advertising, information and newsletters, from which you may unsubscribe at any time without consequences. You may also unsubscribe without any consequences if your business has since ceased to exist, if you have left the business, or if someone else has provided us with your contact details.

The legal basis of processing is your consent. Please note that the user may give prior and express consent to the service provider contacting him or her with advertising offers, information and other mailings at the e-mail address provided at registration. Accordingly, the user may consent to the service provider processing the personal data necessary for this purpose.

Please note that if you wish to receive our newsletter, you are required to provide the necessary data. If you do not provide them, we will not be able to send you newsletters.

Duration of processing: data are processed until consent is withdrawn. You may withdraw your consent to processing at any time by sending a message to the contact e-mail address.

Data are erased upon withdrawal of consent to processing. You may withdraw your consent at any time by sending a message to the contact e-mail address.

Consent may also be withdrawn via the link included in the newsletters sent.

• Persons entitled to access the data: the Data Controller and its employees.
• Method of data storage: electronic.
• Modification or erasure of data may be requested by e-mail, by phone or by post using the contact details given above.
• Processor used: Ilusso Építő Kft.

Please note that your e-mail address does not need to contain any data referring to your person; for example, it does not need to contain your name. You are entirely free to decide whether to provide an e-mail address that contains information revealing your identity. The e-mail address, which serves for keeping in contact, is essential for the newsletter or professional information sent to you to reach you.

Service provider responsible for sending newsletters

Name/company: Twilio Ireland Limited
3 Dublin Landings, North Wall Quay, Dublin 1, Ireland
E-mail: info@twilio.com

8. Person authorised to process data

The person authorised to process personal data is Ilusso Építő Kft. (registered office: 1065 Budapest, Bajcsy-Zsilinszky út 15. A. ép. 2. em. 1., tax number: 27454086-2-42; hereinafter: the Processor). The personal data to be processed may be accessed by the Processor's legal representative(s), employees, agents and contributors from time to time. The Processor does not transfer personal data to third parties, except where the data subject has expressly consented to it.

Hosting provider

Name/company: RackForest Zrt.
Registered office: 1132 Budapest, Victor Hugo utca 11. 5. em. B05001.
Phone: +36 1 211 0044
E-mail: info@rackforest.com

The data you provide are stored on a server operated by the hosting provider. Only our staff and the staff operating the server have access to the data, and all of them are responsible for handling the data securely. Activity: hosting and server services.

Purpose of processing: ensuring the operation of the website.

Data processed: personal data provided by the data subject.

Duration of processing and deadline for erasure: processing lasts until the website ceases to operate, or as set out in the contractual agreement between the website operator and the hosting provider. If necessary, the data subject may also request the erasure of his or her data by contacting the hosting provider. Legal basis of processing: the consent of the data subject and processing based on legal requirements.

9. Duration of data processing

The Data Controller processes personal data provided on the basis of the User's consent until the purpose of processing has been achieved or until the User withdraws consent. The Data Controller processes the personal data provided by the User during registration until the User stops using the Website, in particular until the registration is deleted. Unless otherwise provided by law, the Data Controller may process the personal data collected, without separate further consent and even after the data subject has withdrawn consent, (a) to comply with a legal obligation to which it is subject, or (b) for the purposes of the legitimate interests pursued by the Data Controller or a third party, where the pursuit of such interest is proportionate to the restriction of the right to the protection of personal data (Section 6(5) of Act CXII of 2011). In order to fulfil its accounting obligations, the Data Controller retains and processes the personal data provided by the User for 8 years pursuant to Section 169 of Act C of 2000 on Accounting, and within the limitation period set out in Act XCII of 2003 on the Rules of Taxation.

10. Data transfer and linking of data

The Data Controller does not sell, rent or in any other way make available personal data or information relating to the User to any other company or private individual. The Data Controller ensures the appropriate security of the data as can be expected of it, and takes the technical and organisational measures that guarantee the enforcement of data protection rules and principles and promote the security of personal data. Please note that the Data Controller transfers personal data to third parties only with the consent of the data subject.

11. Cookies

Cookies are placed on the user's computer by the websites visited and contain information such as page settings or login status. Cookies are therefore small files created by the websites visited. By saving browsing data, they improve the user experience. Cookies help the website remember site settings and offer locally relevant content. The service provider's website sends a small file (cookie) to the computer of website visitors in order to record the fact and time of the visit. The service provider informs website visitors of this.

• Data subjects concerned: visitors to the website.
• Purpose of processing: additional services, identification, tracking of visitors.
• Legal basis of processing: the user's consent is not required where the use of cookies is strictly necessary for the service provider.
• Data processed: unique identification number, time, settings data.

Users can delete cookies from their browsers at any time in the Settings menu.

• Controllers entitled to access the data: the Data Controller does not process personal data through the use of cookies.
• Method of data storage: electronic.

12. Social media

Social media is a media tool through which messages are distributed via community users. Social media uses the internet and online presence to enable users to become content creators rather than merely content consumers. Social media is the interface of internet applications where user-generated content can be found, e.g. Facebook, Instagram, LinkedIn, etc. Forms of social media presence can include public speeches, presentations, demonstrations and descriptions of products or services. Information published on social media can take the form of forums, blog posts, images, videos and audio, message boards, e-mail messages, etc. Accordingly, in addition to personal data, the data processed may include the user's public profile picture. Data subjects concerned: all registered users.

• Purpose of data collection: promoting the website or related websites.
• Legal basis of processing: the voluntary consent of the data subject.
• Duration of processing: in accordance with the rules available on the given social media site.
• Deadline for erasure of data: in accordance with the rules available on the given social media site.
• Persons entitled to access the data: in accordance with the rules available on the given social media site.
• Rights relating to processing: in accordance with the rules available on the given social media site.
• Method of data storage: electronic.

It is important to note that when the user uploads or submits any personal data, he or she grants the operator of the social media site a worldwide licence to store and use such content. It is therefore very important to make sure that the user is fully entitled to disclose the published information.

13. Rights relating to data processing

Your rights in relation to data processing are as follows:

• Right to request information: You may request information from us, via the contact details provided, as to which of your data our company processes, on what legal basis, for what purpose, from what source and for how long. We will send the information to the e-mail address you provide without delay, but no later than within 30 days of your request.
• Right to rectification: You may ask us, via the contact details provided, to modify any of your data. We will act on your request without delay, but no later than within 30 days, and will send information to the e-mail address you provide.
• Right to erasure: You may request the erasure of your data via the contact details provided. We will do so without delay upon your request, but no later than within 30 days, and will send information to the e-mail address you provide.
• Right to blocking (restriction): You may request the blocking of your data via the contact details provided. Blocking lasts as long as the reason you indicate requires the data to be stored. We will do so without delay upon your request, but no later than within 30 days, and will send information to the e-mail address you provide.
• Right to object: You may object to the processing via the contact details provided. We will examine your objection as soon as possible, but no later than within 15 days of its submission, decide whether it is justified, and inform you of our decision by e-mail.

14. Legal remedies relating to data processing

If you experience unlawful data processing, please notify our company so that the lawful state can be restored within a short time. We will do everything in our power to resolve the problem described. If, in your opinion, the lawful state cannot be restored, please notify the authority at the contact details below: Nemzeti Adatvédelmi és Információszabadság Hatóság (Hungarian National Authority for Data Protection and Freedom of Information).

Postal address: 1530 Budapest, Pf.: 5.
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat@naih.hu
Web: https://www.naih.hu

Legislation on which data processing is based: – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). – Act CXII of 2011 on the right to informational self-determination and on freedom of information. – Act LXVI of 1995 on public records, public archives and the protection of private archive material. – Government Decree 335/2005 (XII. 29.) on the general requirements for document management by bodies performing public tasks. – Act CVIII of 2001 on certain issues of electronic commerce services and information society services. – Act C of 2003 on electronic communications.

Effective date of this Privacy Statement: 12 March 2022. The Data Controller reserves the right to make changes.