Privacy notice
This notice covers website visitors, people enquiring about our services and people booking consultations. Additional information concerning customer contracts, billing and processing carried out on behalf of customers is provided within the relevant business relationship.
Email: hello@horiws.hu
Phone: +36 30 165 7001
1. Controller and contact details
Horizon Web Services Kft.; registered office: 9730 Kőszeg, Köböl dűlő 9. B épület fsz em. 3 ajtó, Hungary; Hungarian tax number: 32610347-2-18; company registration number: 18-09-116061.
You can send privacy questions and requests to the email address provided here or by post to our registered office.
2. Email and telephone enquiries
To respond to enquiries and coordinate discussions, we process the name, email address, telephone number, business contact details, message contents and communication dates you provide. We ask only for information necessary for your enquiry. Please do not send unnecessary sensitive information.
If you enquire about entering into a contract in your own name, the legal basis is taking steps at your request before entering into a contract, Article 6(1)(b) GDPR. For company representatives and general enquiries, the basis is our legitimate interest in responding to business enquiries and following up discussions, Article 6(1)(f) GDPR. You may object to processing based on legitimate interests.
We retain enquiries that do not result in a contract for 6 months after the last substantive communication. Providing data is voluntary; without appropriate contact details and information about your enquiry, we may be unable to respond or prepare an offer.
3. Booking consultations through Microsoft Bookings
The booking button opens a separate Microsoft website. We use the name, email address, selected time, meeting type, any additional information you provide and details of changes or cancellation to arrange the consultation and send related notifications.
For people acting in their own name, the legal basis is taking steps before entering into a contract, Article 6(1)(b) GDPR. For company representatives, it is our legitimate interest in arranging business consultations, Article 6(1)(f) GDPR.
Booking data unrelated to a contract is retained for 6 months after the meeting or cancellation. For a missed meeting that was not cancelled, the period runs from the scheduled meeting time. Without the required information, an online booking cannot be completed. You can also contact us by email or telephone.
4. Website operation, cookies and analytics
Our website serves static content using Microsoft Azure Static Web Apps. To deliver content and secure the service, the provider’s infrastructure may process technical information such as IP addresses, requested URLs, request times and browser information. For operational and security processing determined by us, the legal basis is our legitimate interest in providing a secure, available website, Article 6(1)(f) GDPR.
The current website has no integrated visitor analytics, advertising tracking, newsletter subscription or contact form. We do not set our own analytics or advertising cookies. Microsoft provides information about the technical operation and cookies of its separately opened Bookings website.
Retention of provider-side technical information is governed by the Azure service settings and terms. We do not operate a separate visitor-log database. Before introducing analytics, we will update this notice and obtain consent before measurement where required.
5. Access, service providers and transfers
Personal data is accessible to people authorised to handle enquiries and bookings. We use Microsoft 365, Exchange Online and Microsoft Bookings for business email and scheduling, and Microsoft Azure Static Web Apps for website hosting.
Microsoft acts as a processor as specified in the applicable contract and Microsoft Products and Services Data Protection Addendum (DPA). Certain processing for Microsoft’s own service purposes is covered by Microsoft’s privacy statement. We do not sell enquirers’ or booking participants’ personal data.
Cloud services may involve processing outside the European Economic Area. Safeguards under the applicable Microsoft contract may include European Commission standard contractual clauses. You can contact us for information about the applicable safeguards and how to obtain them. Links to the provider’s terms are included below.
6. Deletion and exceptional retention
The six-month periods above apply to enquiries and bookings that do not result in a contract. If a contract is entered into, data necessary for its performance is covered by the relevant contractual processing arrangements.
If a statutory retention duty or a specific legal dispute requires further retention, we retain only the relevant information for that purpose and for the period necessary under that obligation or to pursue or defend the claim. Deletion from provider-side security and recovery copies follows the applicable contractual and technical deletion cycles.
7. Your rights and requests
Subject to the GDPR conditions, you may request access to, rectification or erasure of your personal data, or restriction of processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. Data portability may apply to automated processing based on a contract or consent.
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. The enquiry and booking activities described here are not based on blanket consent.
We respond without undue delay and normally within one month of receiving your request. For complex or numerous requests, this may be extended by up to two further months; we will explain the extension within the first month. Where justified, we may request additional information necessary to verify your identity.
We do not carry out solely automated decision-making, including profiling, that produces legal or similarly significant effects on you.
8. Complaints and remedies
You can contact us directly about a privacy concern, but doing so is not a prerequisite for seeking regulatory or judicial remedies. You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or another competent supervisory authority under the GDPR, and seek a judicial remedy.
NAIH: 1055 Budapest, Falk Miksa utca 9–11., Hungary; postal address: 1363 Budapest, Pf. 9., Hungary; email: ugyfelszolgalat@naih.hu; website: https://www.naih.hu/.