Privacy notice

This notice explains how GEDOMI Kft. processes personal data under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679 of the European Parliament and of the Council) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.). It applies to our customers, contact persons acting on behalf of companies, people requesting a quote, newsletter subscribers and visitors of the website.

1. The controller

GEDOMI Kft.
Registered office: 1112 Budapest, Süveg utca 4/a
Office and production: 1095 Budapest, Soroksári út 110–112., C épület, 1. emelet
Company registration no.: 01 09 279778 (Company Court of the Budapest-Capital Regional Court)
Tax number: 25518456-2-43
Data protection enquiries: sales@gedomi.hu, +36 30 013 9081

2. Which data we process, why and for how long

Quote requests and enquiries (website form, e-mail, phone)

Data

name, e-mail address, phone number, company name, the content of the request (item number and colour of the product or of the products collected on the quote list, quantity, occasion, budget, notes), the uploaded logo or artwork

Legal basis

steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)); for contact persons acting on behalf of a company, the controller's legitimate interest in managing the business relationship (GDPR Art. 6(1)(f))

Retention

if no order is placed, 3 years from the request; if an order is placed, as for the fulfilment of the order

Fulfilment of orders, communication, delivery

Data

name, company name, contact person, e-mail address, phone number, delivery address, order details

Legal basis

performance of a contract (GDPR Art. 6(1)(b))

Retention

5 years from the performance of the contract (general limitation period of the Hungarian Civil Code)

Invoicing and accounting obligations

Data

billing name, address, tax number, invoice details

Legal basis

compliance with a legal obligation (GDPR Art. 6(1)(c); Section 169(2) of the Hungarian Accounting Act)

Retention

8 years from the date of the invoice

Reminder of an unfinished quote request

Data

e-mail address, name, item number of the selected product, the address of the page where you filled in the form – the rest of the form is not stored until you send it

Legal basis

the controller's legitimate interest in helping you finish a quote request you started with a single reminder (GDPR Art. 6(1)(f)). You can object with the “No, thanks” button below the form or with the unsubscribe link in the e-mail. We send one reminder at most, without advertising

Retention

until the request is sent or the reminder goes out, at most 7 days. After that we only keep an irreversible hash of the e-mail address: for 1 year, so that you get no further reminder within 30 days and the unsubscribe link keeps working; after unsubscribing, until you ask for its deletion

Newsletter

Data

name, e-mail address

Legal basis

your consent (GDPR Art. 6(1)(a))

Retention

until you withdraw your consent (unsubscribe link in every newsletter or by e-mail)

Secure operation of the website, prevention of abuse

Data

IP address, browser type, time of the request; for the quote form, the IP address as an irreversible hash, to filter out excessive requests

Legal basis

the controller's legitimate interest in operating the website securely (GDPR Art. 6(1)(f))

Retention

up to 30 days in the hosting provider's logs; for the form, together with the quote request

Your name and e-mail address are required for a quote request, as we cannot reply without them; company name and phone number are optional. There is no automated decision-making or profiling.

3. Cookies and data stored in the browser

Necessary cookies (no consent required): the selected currency (cur, 1 year) and your cookie choice (gd_consent, 1 year).

Quote list: if you add products to the quote list with the heart button, the list (item number, colour, name, image and “from” price of the products) stays only in your browser's local storage (localStorage, key: gd_qlist); it does not reach us and is not linked to you. It only reaches us when you send the quote form – we then process the item numbers and colours together with the request (see section 2), and the list in the browser is cleared. This storage is strictly necessary for the function you asked for, so no consent is required (Section 155(4) of Hungarian Act C of 2003 on electronic communications and Article 5(3) of Directive 2002/58/EC); it has no expiry and stays until you clear it with the “Clear the list” button or by deleting your browser data.

Statistics and advertising cookies (only with your consent, which you can change at any time in the cookie banner or via the “Cookie settings” link at the bottom of the page): Google Analytics 4 (_ga, _ga_*, up to 2 years) to measure visits; Google Ads (_gcl_*, 90 days) to measure ad results and for remarketing; Meta Pixel (_fbp, 90 days) to measure and target Facebook and Instagram ads; Microsoft Clarity (_clck, 1 year; _clsk, 1 day) for anonymous analysis of how the site is used (clicks, scrolling). Without consent these services store no cookies and at most receive cookieless, aggregated signals (Google Consent Mode). Legal basis: consent (GDPR Art. 6(1)(a)). You can also delete cookies in your browser settings at any time.

4. Who has access to the data?

The data can be accessed by those GEDOMI Kft. employees who need it for their work. We use the following processors, only for the purpose stated:

• Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) – hosting and delivery of the website; the database and uploaded files are stored in the EU
• RACKFOREST Zrt. (1132 Budapest, Victor Hugo u. 11.) – server services
• Pipedrive OÜ (Mustamäe tee 3a, 10615 Tallinn, Estonia; registry code: 11958539) – customer relationship management (CRM), newsletter sign-up
• Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) – e-mail and documents (Google Workspace, also used to send quote confirmations and reminders); website statistics and ad measurement (Google Analytics, Google Ads) – the latter only with your consent
• KBOSS.hu Kft. (1031 Budapest, Záhony utca 7.; company reg. no.: 01-09-303201; tax no.: 13421739-2-41) – invoicing (Számlázz.hu)
• GLS General Logistics Systems Hungary Csomag-Logisztikai Kft. (2351 Alsónémedi, GLS Európa u. 2.; company reg. no.: 13-09-111755; tax no.: 12369410-2-44) – parcel delivery
• UPS Magyarország Szállítmányozó Kft. (2220 Vecsés, Lőrinci út 154., Airport City Logistic Park, G building; company reg. no.: 13-09-139285; tax no.: 22776082-2-44) – parcel delivery
• Microsoft Ireland Operations Ltd. (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) – website usage analysis (Microsoft Clarity) – only with your consent
• Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland) – advertising (Facebook, Instagram) – only with your consent
• Anthropic Ireland, Limited (Dublin, Ireland; part of the US Anthropic PBC group) – preparing replies to incoming e-mails and quote requests with artificial intelligence (reply suggestions); every reply is checked and sent by our staff, and the provider does not use the data to train models

Beyond this, we only disclose data where required by law (e.g. at the request of an authority or court) and to our legal counsel and accountant, to the extent necessary.

5. Transfers outside the EU

Some of our providers (Cloudflare, Google, Meta, Microsoft, Anthropic) belong to US groups, so data may be transferred to the United States. In that case the transfer is based on the EU–US Data Privacy Framework or on standard contractual clauses adopted by the European Commission.

6. Data security

The website runs over an encrypted (HTTPS) connection. Quote requests and uploaded files are kept in non-public, access-protected storage in the European Union, accessible only to authorised employees.

7. Your rights

• you can request information about and access to your data (GDPR Art. 15),
• request their rectification (Art. 16) or erasure (Art. 17),
• request the restriction of processing (Art. 18),
• request your data in a machine-readable format (data portability, Art. 20),
• object to processing based on legitimate interest and to direct marketing (Art. 21),
• withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal.

You can submit your request using the contact details in section 1; we will reply within one month at the latest.

8. Remedies

If you believe that the processing of your data infringes the law, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH; 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; e-mail: ugyfelszolgalat@naih.hu; naih.hu) or with the supervisory authority of your EU country of residence, or go to court; you may also bring the case before the court of your place of residence. Please contact us first so that we can resolve the matter directly.

9. Minors

Our services are intended for businesses and organisations. We only process data of persons under 16 with the consent of the holder of parental responsibility.

10. Effective date

This notice is effective from 27 October 2026. Any changes will be published on the website.