LEGAL INFORMATION
Privacy notice
How does Core Systems handle personal data provided when using the website or making contact, how long is it retained, and what rights do you have?
Version date:
1. The data controller
Core Systems Kft. is the controller for the website and incoming enquiries. You may send data protection requests to the email or postal address below. This notice covers the website and business enquiries. Conditions for data processed in a client project must be agreed separately for that engagement.
- Company name
- Core Systems Kft.
- Registered office
- 2536 Nyergesújfalu, Kölcsey Ferenc utca 9.
- Tax number
- 14269141-1-11
- Company registration number
- 11-09-013602
- Register court
- Tatabányai Törvényszék Cégbírósága
- Phone
- +36 30 815 1441
2. Contact and responses
The form requires your name, email address and message to respond to the enquiry. Phone number and subject are optional. The application records the receipt time, language and submission source, along with a technical identifier to prevent duplicate submissions. For email enquiries, the company processes the data included in the email.
Processing serves to answer your question, clarify requirements and conduct business discussions. If you act as a natural person, for example a sole trader preparing your own contract, the legal basis is Article 6(1)(b) GDPR. Core Systems processes the data of company representatives or employees based on its legitimate interest in business communication under Article 6(1)(f) GDPR. You may object to this processing.
Website messages are removed from the application database after 180 days from receipt, during the next daily deletion run. Correspondence that does not lead to a contract is deleted within 180 days of the last substantive discussion, unless a specific legal claim requires longer retention. If further retention is needed for contract performance, a legal claim or a statutory obligation, its purpose, legal basis and duration must be addressed separately.
The company does not use the data for newsletters or advertising profiles. Please do not send passwords, health data or confidential information unnecessary for understanding the task in your first enquiry.
3. Security and technical logs
To limit abuse, the website uses an identifier derived from the IP address with a secret key. This is pseudonymized data, not anonymous data. Submission limit counters are deleted after one day from their start time, during the next daily deletion run.
The security event log stores the event type, time, technical identifier, affected operation ID and, where necessary, the pseudonymized IP identifier. Entries are deleted after 90 days during the next daily deletion run.
The hosting web server's access logs may include IP addresses, timestamps, requested paths, request methods and response statuses. Hosting logs are retained for three months for troubleshooting, operations and investigating security incidents.
Security processing is based on Article 6(1)(f) GDPR. The legitimate interest is protecting the service and preventing unauthorized access and mass abuse. Access to logs is restricted to those who need it for operations.
5. Traffic measurement
With your prior consent, we use Google Analytics 4 to measure which pages are visited and where visitors come from. The purpose is to understand website use and improve its content. The legal basis is Article 6(1)(a) GDPR. If you decline, the website and contact options remain available and the measurement code does not load.
Measurement may involve the page URL and view time, referring website, browser and device characteristics, approximate geographic data and pseudonymous cookie identifiers. Google also receives the IP address through the network connection. This is not anonymous processing. We remove query parameters and fragments from page URLs and send only the website origin of the referring page.
Analytics cookies are named _ga or start with _ga_. Their configured lifetime is at most 90 days, and visits do not automatically extend it. User-level and event-level retention in Google Analytics is set to two months, without extension on new activity. Google deletes expired data according to its own schedule. This setting does not limit retention of aggregate statistical reports.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google group companies and subprocessors may also process data outside the European Economic Area, including in the United States. For US recipients certified under the EU-US Data Privacy Framework, Google relies on the adequacy decision. For other relevant transfers, it relies on applicable standard contractual clauses and supplementary safeguards. Detailed processing and transfer terms are available through the links below.
We do not use Google Ads tracking, Google Signals, advertising personalization or user-provided data collection. We do not measure form content or form completion events. Traffic measurement is not a condition of using the service.
You can withdraw consent at any time using Cookie settings in the footer and selecting Necessary cookies only. We then stop measurement, delete accessible analytics cookies belonging to the website and reload the page. Withdrawal does not affect the lawfulness of earlier processing or automatically delete data already sent. You may submit a deletion request using the controller's contact details.
Google data processing terms · Google international data transfers · Google privacy policy
6. Access, hosting and backups
Enquiries are handled by the authorized representative of Core Systems. The following processor provides hosting and company email. Its tasks relate to storage, email, backups and technical operations.
Hosting backups are retained for three months. Data deleted from the active system may therefore remain in backups until they expire. Backups serve recovery and may not be used for new business enquiries. After restoration, previous deletions must be reapplied.
Names, email addresses, phone numbers, subjects and messages submitted through the form are not sent to Google Analytics or external AI services. The application does not make automated decisions or create profiles based on submitted messages.
- Company name
- Software One Kft.
- Registered office
- 2536 Nyergesújfalu, Nagy László utca 23.
- info@softwareone.hu
- Company registration number
- 11-09-018455
- Tax number
- 23323034-2-11
7. Rights and remedies
You may request information and access to your personal data, correction of inaccurate data, and erasure or restriction under the conditions of the GDPR. You may object to processing based on legitimate interests for reasons relating to your particular situation. Data portability applies in the cases specified by the GDPR, including automated processing based on a contract.
The company responds without undue delay and within one month at the latest. Complex or numerous requests may require an extension of up to two further months. You will be informed of the extension and its reasons within the first month. Only necessary additional information may be requested for identification.
If you believe processing violates your rights, you may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or seek a judicial remedy. NAIH's address is 1055 Budapest, Falk Miksa utca 9–11. Postal address: 1363 Budapest, Pf. 9. Complaint procedures are available on the official page linked below.
8. Changes to this notice
This notice is updated when the website or processing changes. Publishing revised text does not by itself make a new use of previously collected data lawful. Material changes require notification of affected people in accordance with applicable data protection rules.