Privacy Policy

Demetar Company Kft ("Demetar", "we", "our", "us"), a company registered in Hungary with its registered office at 1043 Budapest, Bocskai út 26. Fsz. 8. ajtó, is the data controller responsible for the personal data collected through the website demetar-company.com (the "Site") and through our business activities. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how we share it and the rights you have under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Hungarian data protection law.

1. Data we collect

We collect personal data in the following ways:

• Data you provide directly — when you contact us, request a quotation, place an order, sign up to a newsletter or otherwise communicate with us, we collect information such as your name, company, email address, phone number, postal address and the content of your message.
• Data we collect automatically — when you visit the Site we automatically collect technical information including your IP address, browser type and version, device information, operating system, referring URL, pages visited, time and date of visit and other diagnostic data.
• Cookies and similar technologies — see the Cookies section below.

2. How we use your data

We process personal data for the following purposes and legal bases:

• To respond to your enquiries, provide quotations and deliver the services or products you have requested (performance of a contract or pre-contractual steps, Art. 6(1)(b) GDPR).
• To operate, maintain and improve the Site, including diagnosing problems and analysing usage (legitimate interests, Art. 6(1)(f) GDPR).
• To comply with legal obligations, including tax, accounting and consumer protection requirements (legal obligation, Art. 6(1)(c) GDPR).
• To send marketing communications about our services and products, where you have given your consent or where permitted by applicable soft opt-in rules (consent, Art. 6(1)(a), or legitimate interests, Art. 6(1)(f) GDPR).
• To establish, exercise or defend legal claims (legitimate interests, Art. 6(1)(f) GDPR).

3. Cookies

The Site uses cookies and similar tracking technologies. A cookie is a small text file that is stored on your device when you visit a website. We use:

• Strictly necessary cookies, required for the Site to operate, such as remembering your cookie consent choice. These cannot be switched off.
• Analytics cookies, which help us understand how visitors use the Site so we can improve it. They are only set after you have given your consent.
• Marketing cookies, which may be used to deliver advertising more relevant to you, only after consent.

When you first visit the Site you will see a cookie banner that allows you to accept all cookies or reject non-essential ones. You can change your preferences at any time by clearing the cookies stored by our Site in your browser settings, which will cause the banner to be shown again on your next visit.

4. Sharing your data

We do not sell your personal data. We share personal data only with trusted third parties who help us operate our business, such as hosting providers, email and communication platforms, accounting and legal advisors, payment processors, logistics partners and analytics providers. These parties are bound by contractual obligations to use personal data only in accordance with our instructions and applicable data protection law. We may also disclose personal data where required by law, court order or competent authority, or to protect our rights, property or safety.

5. International transfers

Where personal data is transferred outside the European Economic Area, we put in place appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to ensure that your data continues to be protected to a standard equivalent to that required by the GDPR.

6. How long we keep your data

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. As a general rule, contractual data is kept for the duration of the relationship plus the statutory limitation period; marketing data is kept until you withdraw your consent; and Site analytics data is kept for a maximum of 26 months.

7. Your rights

Under the GDPR you have the right to:

• access your personal data and obtain a copy of it;
• request rectification of inaccurate or incomplete data;
• request erasure of your personal data in certain circumstances;
• request restriction of processing or object to processing;
• data portability, where applicable;
• withdraw any consent you have given, at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
• lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or your local data protection authority.

To exercise any of these rights, please contact us at info@demetar-company.com.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or for other operational reasons. The updated version will be indicated by a revised "Last updated" date and will be effective as soon as it is accessible on the Site.

10. Contact

For any privacy-related questions or to exercise your rights, please write to info@demetar-company.com or by post to Demetar Company Kft, 1043 Budapest, Bocskai út 26. Fsz. 8. ajtó, Hungary.