This policy explains how Metalconstruct Zrt. handles personal data submitted through this website and what rights you have in relation to it.
01Data controller
Controller: Metalconstruct Zrt.
Registered office: 6000 Kecskemét, Fűzfás köz 3., Hungary. Company registration number: 03-10-100237. Tax number: 11574996-2-03.
Privacy enquiries: titkarsag@metalconstruct.hu. No data protection officer has been appointed.
02Data processed and purposes
Contact form: name, e-mail address and message (and the business unit, if you send the form from a unit page), to answer your enquiry. The message is not stored in a database by the website; it is forwarded by e-mail to the company's designated mailbox.
Job applications: name, e-mail address, phone number (optional), message (optional) and the uploaded CV, to assess your application. Applications are stored in a database and file storage, and the company receives an e-mail notification.
Technical data: to protect the forms and file upload against abuse, the website records the IP address of the request and the time (rate limiting), as well as sign-in attempts to the content management area.
03Legal basis
Contact: answering your enquiry, based on our legitimate interest under Article 6(1)(f) GDPR. Job applications: assessing your application, under Article 6(1)(b) GDPR (steps prior to entering into a contract). Technical data (IP address): protecting the site and forms against abuse, based on our legitimate interest under Article 6(1)(f) GDPR.
04Retention period
Contact messages: until the enquiry is closed, and for no more than 1 year. Job applications: for up to 6 months after the decision; we will ask for your separate consent to keep them longer. Technical log data (IP address): for up to 7 days.
05Processors and recipients
We use the following service providers to run the website: Netlify, Inc. (hosting and file storage; 101 2nd Street, San Francisco, CA 94105, United States), Neon (database; data is held on servers in the European Union, in Frankfurt) and Resend (e-mail delivery; United States). Transfers outside the European Economic Area rely on the EU–US Data Privacy Framework or the standard contractual clauses (SCCs) in our data processing agreements with the providers.
Beyond these, personal data is accessible only to authorised staff of the company and is not passed on to third parties unless required by law.
06Third-party content
The site may embed a Google map and a YouTube video. The map and the video's preview image may load when you open the page; the video itself only loads once you click to play it. When they load, the providers may process data under their own terms. See the Cookie Policy for information on cookies.
07Your rights
You may request access to your personal data, ask for it to be rectified or erased, ask for processing to be restricted, request the data you provided in a machine-readable format (data portability), and object to processing. Where processing is based on consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of earlier processing.
You can submit a request using the controller's contact details above.
08Complaints and remedies
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): Falk Miksa utca 9–11, 1055 Budapest, Hungary; postal address: 1363 Budapest, P.O. Box 9; e-mail: ugyfelszolgalat@naih.hu; website: naih.hu. You may also bring the matter before a court.
