Privacy policy

DBI Szoftver Kft. operates in the field of information technology (specifically in computer programming) and processes data necessary for the fulfillment of its services.
DBI Szoftver Kft. (hereinafter referred to as the "Service Provider") operates the website www.websiteempire.eu (hereinafter referred to as the "Website") and processes the personal data of individuals interested in the website or requesting quotes (hereinafter collectively referred to as the "Data Subject").

1. Data Controller's Contact Information
Name: DBI Szoftver Kft.
Registered Office and Mailing Address: 4034 Debrecen, Vágóhíd utca 2. Building IV, 217.
Representative's Name and Phone Number: László Tóth, +36 30 9980 732
Email: toth.laszlo@honlapbirodalom.hu
2. Scope of Personal Data Processed
We request various personal data from users to access different services, adhering to the principle of data minimization. This Privacy Notice applies exclusively to the processing of personal data of natural persons visiting the website. Personal data only applies to identifiable natural persons.

Anonymous information collected without the possibility of identification and demographic data that is not linked to identifiable persons are not considered personal data. The personal data processed includes:

2.1 Inquiries and interested parties

Name
Email address
Phone number

2.2 Children's Data Our products and services are not intended for individuals under 16 years of age, and we ask that persons under 16 do not provide Personal Data to the Data Controller. If we become aware that we have collected personal data from a child under 16, we will take steps to delete the data as soon as possible.

3. Cookie (Anonymous User Identifier) Policy
The Data Controller places an anonymous user identifier (cookie) on the user's computer. These cookies do not identify the user personally but recognize the user's device. They do not store or transmit IP addresses or other personal data. The cookies used are simple, short, and small text files. No personal data or information is required, as no personal data is exchanged between the user and the Service Provider.

Cookies necessary for website functionality: Some cookies are essential for the website's operation. These make the website load faster, allow the browser to store specific information, and help the modules function properly. Examples include:

S_LANG (Session): Stores the visitor's preferred language code.

COOKIE-CONSENT (1 year): Prevents further cookie consent requests after acceptance for one year.

KRID (Session): Used for registration and cart functions, ensuring that products remain in the cart if the user leaves it.
Analytical cookies: To gather website traffic and other web analytics data, the Service Provider uses independent analytical services, specifically Hotjar and Google Analytics. For details on data processing by these services, users can refer to the providers' privacy policies.

The Service Provider has set up Google Analytics in a way that anonymizes IP addresses, making them unidentifiable. You can read more about this technology here: Google Analytics Support. The aim is to analyze website traffic and functionality to improve user experience (e.g., optimized navigation and information arrangement).

These measurements do not store user-identifiable data, such as IP addresses or personal information.
For Google Inc.'s privacy policy, visit: Google Privacy Policy
For Hotjar's privacy policy, visit: Hotjar Privacy Policy
For more information on the cookies used by these services:

Hotjar Cookie Information
Google Analytics Cookie Details
Google Tag Manager Cookie Details

Cookies Used for Advertisements
The Service Provider may use modern online marketing solutions, specifically Google AdWords and Facebook ads, which use cookies during their operation. These cookies help ensure that users see relevant ads instead of irrelevant ones, tailored to their current interests. The Service Provider uses remarketing codes provided by Google AdWords and Facebook on the Portal. These remarketing codes also use cookies.

The installed cookies do not transmit personal data to the Service Provider but assist in showing ads related to the Service Provider's products and services on other websites within the Google Display Network or on Facebook that the user visits later.

Manual Override and Adjustment of Automatic Ad Preferences
Users can disable cookies and customize ads at any time via the Google and Facebook ad settings interfaces.

You can manage Google account privacy settings here: Google Privacy
Facebook account privacy settings are available under the privacy and ad settings menu: Facebook Ad Preferences

Disabling or Blocking Cookie Usage
Modifying browser settings:
Most browsers provide a "Help" function that offers information on how to:

Disable cookies,
Accept new cookies,
Instruct the browser to set a new cookie, or
Disable other cookies.
Blocking Browser Extensions:
If users do not want Google Analytics to measure data as described, they can install a browser extension to block it.

Using External Solutions for Cookie Management:
Users can manage which providers are allowed to engage in advertising cookie activity on their computer using external websites. One solution is AdChoices, which is also available in Hungarian.

4. Social Media Plugins
On the Portal, plugins are disabled by default. These plugins also use cookies and are only activated when the user clicks on the corresponding button (e.g., liking a post, pinning an image, or following the Service Provider’s Facebook page with the "like" button). By enabling the plugin, the user establishes a connection with the social media platform, explicitly indicating consent to share data with Facebook/Twitter/LinkedIn/Pinterest/Instagram.

If the user is logged into Facebook/Twitter/LinkedIn/Pinterest/Instagram, the respective social network may associate the visit with the user’s social account.

If the user clicks on one of the aforementioned social media buttons, their browser will directly transmit the relevant information to the social network, where it will be stored.

Information on the scope and purpose of data collection, further processing, and use of personal data by Facebook/Twitter/LinkedIn/Pinterest/Instagram, and the user's rights and settings for protecting their personal data, can be found in the respective social media privacy policies.

By using the services of the website, the user acknowledges and consents to the processing of their data by Google.

5. Technical Data – Log Files

To ensure the use of services, the system automatically logs the following data:

The dynamic IP address of the user's computer
The type of browser and operating system used by the user, depending on the settings of the user's computer
The user's activity related to the website
These data are used for technical purposes, such as analyzing the secure operation of servers and for post-analysis. This is an automatic IT security process, recorded in the server logs without the user's declaration.

The above data cannot be used to identify the user and are not linked by the Data Controller to any other personal data. Log data is stored for six months from the date of the visit.

6. Legal Basis and Purpose of Data Processing

6.1 For inquiries and interested parties:
Data processing is necessary for steps taken prior to entering into a contract. The purpose of data processing is to provide personalized service to the data subjects and to send a quote upon request, which may serve as the basis for a future contract or order.

7. Duration of Data Processing

7.1 For inquiries and interested parties:
If a contract is concluded, personal data will be processed for the duration of the contract and retained for eight years following the year of performance, in accordance with accounting laws. If no contract is concluded, meaning the purpose is not fulfilled, the data will be processed until March 1 of the year following the expiration of the offer.

8. Scope of Data Access, Data Transfer, Data Processing

The personal data collected from the data subjects may be accessed by the internal staff of the Service Provider and will not be published. Personal data will only be transferred to a third party for data processing purposes at the request of the data subject, to the recipient specified by the data subject.
To perform specific tasks (e.g., accounting, issuing electronic invoices, sending newsletters), the Service Provider may engage data processors.
The categories of data processors and the recipients of data transfers are:

Name: Benemiz Groups Bt.
Address: 4032 Debrecen, Vágóhíd utca 2.
Category: Accounting

Name: KBOSS.hu Kft.
Address: 1031 Budapest, Záhony utca 7.
Category: Electronic invoicing software

Name: DBI Szoftver Kft.
Address: 4034 Debrecen, Vágóhíd utca 2.
Category: Web hosting provider

9. Data Subjects' Rights and Remedies
9.1 The data subject may request from the Data Controller:
a) information regarding the processing of their personal data,
b) the rectification of their personal data,
c) the deletion or blocking of their personal data, except for mandatory data processing, and
d) the transfer of their personal data to another data controller.

9.2 Upon the data subject's request, the Data Controller shall provide written information within 30 days from the submission of the request about the data processed by the Data Controller or its designated data processor, including the source of the data, the purpose, legal basis, and duration of the processing, the name and address of the data processor, and the activities related to the data processing. If personal data has been transferred, the legal basis and recipient of the data transfer will also be provided.

The information is free of charge if the data subject has not submitted a request for the same area of information in the current year. Otherwise, the Data Controller may charge a fee, which must be refunded if the data was unlawfully processed or if the request for information leads to correction.

The Data Controller maintains a data transfer log to monitor the legality of the transfers and inform the data subject. This log includes the date of transfer, the legal basis and recipient, the data transferred, and other information required by applicable law. The Data Controller also keeps a record of data breaches, detailing the affected personal data, the individuals affected, the date, circumstances, effects, and measures taken to address the breach.

9.3 The data subject has the right at any time to request the correction or deletion of incorrectly recorded data. This request must be submitted in writing, either by postal mail or electronically. The Service Provider will delete the data within 3 business days from the receipt of the request, after which the data cannot be restored. Deletion does not apply to data processing required by law (e.g., accounting regulations), which the Service Provider will retain for the necessary duration.

9.4 The data subject may also request the restriction of data processing or the transfer of their data to another data controller. The Service Provider will restrict the data processing if requested by the data subject, or if it is assumed that deletion would violate the data subject’s legitimate interests. Restricted data can only be processed for as long as the purpose for the restriction exists.

The data subject and any third parties to whom the data was previously transferred must be notified of any correction, restriction, or deletion. Notification may be omitted if it does not affect the data subject's legitimate interests. If the Service Provider does not fulfill the request for correction, restriction, or deletion, it will inform the data subject in writing within 30 days of the factual and legal reasons for the refusal.

The data subject may, through the contact information provided in section 9.5:

request the transfer of their data to another controller if the data processing is based on a contract or consent and is carried out automatically by the Service Provider,
withdraw their consent previously given for data processing.
The data subject may object to the processing of their personal data. The Service Provider will review the objection within 15 days and make a decision on its validity, notifying the applicant in writing. In case of a refusal, the Data Controller will inform the data subject about the possibility of legal recourse or turning to the authority.

Data Security Information:
The Data Controller ensures default and built-in data protection by implementing appropriate technical and organizational measures to:

regulate access to data strictly,
grant access only to individuals who need it for their tasks, and only to the extent necessary,
carefully select data processors and secure data through adequate data processing agreements,
ensure the integrity, authenticity, and protection of the data it processes.
The Data Controller applies reasonable physical, technical, and organizational security measures to protect the data from accidental, unauthorized, or unlawful destruction, loss, alteration, transfer, or access. The Data Controller promptly notifies the data subject in case of unauthorized access or use of personal data that poses a high risk to the data subject.

The Data Controller ensures the protection of transferred data, for example, by encrypting the data. The Data Controller is fully responsible for the data processing carried out by third parties. The Data Controller also ensures regular backups to protect the data from destruction or loss.

9.5 The data subject can exercise their rights at the following contact information:
Mailing Address: 4034 Debrecen, Vágóhíd utca 2. Building IV, 217
Email: toth.laszlo@honlapbirodalom.hu
The data subject may contact the Service Provider’s staff with any data processing-related questions or comments using the contact details provided in section 9.5.

9.6 The data subject may, based on GDPR, the Information Act, and the Civil Code (Act V of 2013):

contact the National Authority for Data Protection and Freedom of Information (NAIH) at 1125 Budapest, Szilágyi Erzsébet fasor 22/c.;www.naih.hu, or
assert their rights in court.
9.7 If the data subject provided third-party data when using the services, registering, or subscribing to newsletters, or caused damage in any way during the use of the website, the Service Provider has the right to seek compensation from the data subject. The Service Provider will provide all possible assistance to the authorities in identifying the infringing party.