Privacy notice
In short: we measure visits to this site only with the visitor's consent. The site does not send or store what is typed into the contact form: the visitor sends the message from their own email program.
In force from:
1. The controller
T-NET Kft. (registered office: 2141 Csömör, Vízműsor u. 10/B, Hungary; company registration number: 13-09-249562; tax number: 12004661-2-13), referred to below as the company. Email: info [at] tnetsolutions [dot] hu.
The company is not required to appoint a data protection officer and has not appointed one. It can be reached about data protection at the email address above.
Processing is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and by Hungarian Act CXII of 2011 on the right to informational self-determination and on freedom of information.
2. Contact by email
The contact form puts a message together in the visitor's own email program; until then, what is typed into the form stays in the browser. The visitor sends the message from their own email account, and only then does the data reach the company. The same applies when someone writes to the company's email address directly.
- Data processed
- Name, email address, the subject and content of the message, and the message's technical data (for example the time it was sent).
- Purpose
- Answering the enquiry, giving a quote, keeping in contact.
- Legal basis
- Article 6(1)(f) GDPR: the company's legitimate interest in being able to answer the enquiries it receives. Where the enquiry is a request for a quote or a step towards a contract, the legal basis is Article 6(1)(b).
- Retention
- For 1 year after the matter is closed. If the enquiry leads to a contract, the contract's documents are kept until the end of the limitation period (5 years), and accounting documents for 8 years under Section 169 of Hungarian Act C of 2000 on accounting.
- Processor
- The company's email is served by Gmail; its provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google LLC (United States) may also access the data, under the EU–U.S. Data Privacy Framework.
3. Visit statistics (Google Analytics)
The site measures visits with Google Analytics 4, but only if the visitor accepts this on the bar shown at the first visit. If it is declined, the measuring code is not loaded at all and no analytics cookie is placed in the browser. Consent is not a condition of using the site.
- Data processed
- The pages viewed, the time and length of the visit, the referring page, the browser and device type, the screen size, the language, an approximate location derived from the IP address (country, town), and a random identifier stored in a cookie. Google Analytics 4 does not store the IP address.
- Purpose
- Learning how many people use the site and how. The company uses no advertising or remarketing features.
- Legal basis
- The visitor's consent: Article 6(1)(a) GDPR, and for placing cookies Section 155(4) of Hungarian Act C of 2003 on electronic communications.
- Retention
- User-level and event-level data is kept in Google Analytics for 2 months; aggregated statistics that cannot be linked to a person are kept longer.
- Processor
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
- Transfer outside the EU
- Google LLC (United States) may also access the data. The transfer is based on the European Commission's adequacy decision on the EU–U.S. Data Privacy Framework, in which Google LLC is a certified participant.
- Withdrawal
- Consent can be withdrawn at any time with the "Cookie settings" link in the footer. After withdrawal the measurement stops and the site deletes the analytics cookies; withdrawal does not affect the lawfulness of earlier processing.
4. Cookies and local storage
| Name | What it is for | Lifetime | When it is placed |
|---|---|---|---|
| _ga | Google Analytics: telling visitors apart | 2 years | Only after acceptance |
| _ga_<id> | Google Analytics: session state | 2 years | Only after acceptance |
| tnet-consent (local storage) | Remembering the choice about cookies, so the bar is not shown every time | 12 months, then the site asks again | When the choice is made; necessary for operation, needs no consent |
| __cf_bm | Cloudflare's protection against automated traffic; not used for tracking | 30 minutes | Only if Cloudflare finds it necessary for protection; needs no consent |
5. Serving the site
When the site is opened, the browser sends technical data: the IP address, the time of the request, the address of the page requested and the browser type. The site cannot be displayed without these. The legal basis is Article 6(1)(f) GDPR: the company's legitimate interest in operating the site securely.
The company keeps no access log on its own server and does not store visitors' IP addresses.
- Hosting
- Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). The server is located in the European Union.
- Network and protection
- Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Traffic passes through Cloudflare's network, which processes the technical data above for a short time in order to deliver the site and filter out attacks. Cloudflare is a certified participant in the EU–U.S. Data Privacy Framework.
6. Data subjects' rights
Anyone whose data the company processes may ask the company, at the email address above, to:
- tell them what data it processes about them and give them a copy (access);
- correct inaccurate data (rectification);
- delete the data where there is no longer a legal basis for processing it (erasure);
- restrict the processing of the data;
- hand the data over in a machine-readable form where the processing is based on consent or a contract (portability).
A data subject may object to processing based on legitimate interest, and may withdraw a consent at any time. The company answers a request without undue delay and within one month at the latest; where necessary this period may be extended by two months. Requests are handled free of charge.
The company makes no decisions based solely on automated processing and does no profiling.
7. Remedies
Anyone who believes the company has broken the rules on processing their data may lodge a complaint with the supervisory authority or go to court. At the data subject's choice, the action may also be brought before the regional court of their place of residence or stay.
- Authority
- Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH)
- Address
- 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9. - Contact
- Phone: +36 1 391 1400
Email: [email protected]
Web: www.naih.hu
8. Changes to this notice
If the way the site works or the processing changes, the company amends this notice and shows the date of the change at the top of the page. This English version is a translation; if the two differ, the Hungarian text prevails.