Privacy Policy

This is a convenience translation. The legally binding version of this policy is the Hungarian original.

Effective date: June 12, 2026

1. Data controller details

Full name: ProcurePro Kft.

Registered address: 3534 Miskolc, Nagy Lajos király útja 22., Hungary

Tax number: 32464737-2-05

Company registration number: Cg.05-09-037382

Representative: Győző Berki

Data protection contact e-mail: gyozo.berki@procurepro.hu

2. Categories of personal data processed and purposes of processing

2.1 Client relations and performance of contract

Legal basis: GDPR Art. 6(1)(b) – performance of a contract.

Legal basis: GDPR Art. 6(1)(c) – compliance with a legal obligation (e.g. retention requirements under accounting legislation).

2.3 Handling enquiries and contact requests

Legal basis: GDPR Art. 6(1)(f) – legitimate interests (responding to the client’s enquiry).

2.4 Newsletter and direct marketing

Legal basis: GDPR Art. 6(1)(a) – consent. The data subject’s consent may be withdrawn at any time.

2.5 Website visits – cookies

Detailed information on the cookies used on the website and the data they collect is provided in the Cookie Policy.

3. Processors and data transfers

The data controller uses the processors listed below in the course of data processing activities related to the website and client relations. Data processing agreements are in place with all processors (GDPR Art. 28).

Where the data controller engages a processor that processes data outside the European Union / European Economic Area (e.g. a US-based cloud provider), the transfer takes place on the basis of applicable safeguards (e.g. standard contractual clauses).

4. Rights of the data subject

4.1 Right of access (GDPR Art. 15)

The data subject may request information on whether the data controller processes their personal data and, if so, what data, for what purpose, for how long, and to whom it is disclosed. A copy of the data being processed may be requested — free of charge, within 30 days.

4.2 Right to rectification (GDPR Art. 16)

The data subject may request the correction of inaccurate or incomplete personal data.

4.3 Right to erasure (GDPR Art. 17)

The data subject may request the erasure of their personal data. This right is not absolute: it cannot be fulfilled where processing is necessary to comply with a legal obligation (e.g. statutory accounting retention period) or to establish, exercise or defend legal claims.

4.4 Right to restriction of processing (GDPR Art. 18)

The data subject may request that the data controller restrict processing, for example where the accuracy of the data is contested.

4.5 Right to data portability (GDPR Art. 20)

The data subject may request that data relating to them and provided by them be received in a machine-readable format. This right applies only where the legal basis is consent or contract and the processing is carried out by automated means.

4.6 Right to object (GDPR Art. 21)

The data subject may object to processing based on legitimate interests. Where the objection relates to direct marketing, it must be complied with immediately.

5. Complaints and remedies

5.1 Complaint to the supervisory authority

The data subject may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH):

  • Website: naih.hu
  • E-mail: ugyfelszolgalat@naih.hu
  • Phone: +36 1 391-1400
  • Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary

5.2 Judicial remedy

The data subject may also bring proceedings against the data controller before a court. The action may — at the data subject’s choice — be brought before the court of the data subject’s place of domicile or habitual residence.

6. Data security

The data controller applies appropriate technical and organisational measures to protect personal data in accordance with GDPR Art. 32:

  • Encrypted data transfer (HTTPS / TLS protocol)
  • Password protection and two-factor authentication (2FA) for internal systems
  • Access control: personal data is accessible only to authorised persons
  • Regular data backups
  • Employee data-protection training and confidentiality obligations

7. Changes to this policy

The data controller reserves the right to amend this policy unilaterally. Data subjects will be notified of changes via the updated policy published on the website. In the event of material changes, the data controller will also notify data subjects by e-mail where an e-mail address is available.


ProcurePro Kft.  |  3534 Miskolc, Nagy Lajos király útja 22.  |  gyozo.berki@procurepro.hu