Document [A]
Privacy Policy
§ 1.0PrimeDigitalWave is the data controller for personal data processed through this website and through our client engagements. Our registered address is Széchenyi István tér 2, 7621 Pecs, Hungary, and we can be reached at [email protected].
§ 1.1We collect only the data you send us directly through the contact desk (name, email, phone number, company, project details) and data generated automatically by the server (IP address, browser type, timestamp, visited pages).
§ 1.2Purposes of processing: answering your enquiry, preparing quotes, delivering contracted services, invoicing and accounting, securing our infrastructure, and — only with your consent — measuring website performance through analytics cookies.
§ 1.3Legal bases: Article 6(1)(a) GDPR for consent-based processing, Article 6(1)(b) GDPR for steps taken at your request prior to entering a contract, Article 6(1)(c) GDPR for statutory bookkeeping obligations, and Article 6(1)(f) GDPR for legitimate interests in network security and service improvement.
§ 1.4We do not sell, rent, or broker personal data. Recipients are limited to processors acting on our instructions — hosting, email delivery, payment handling (Stripe), and accounting — each bound by a data processing agreement under Article 28 GDPR.
§ 1.5Retention: enquiry records are kept for 24 months after the last contact; client project files and invoices are retained for 8 years to satisfy Hungarian accounting law; server logs are rotated after 12 months.
§ 1.6Transfers outside the European Economic Area occur only where an adequacy decision or Standard Contractual Clauses are in place. Where data is stored on EU-based infrastructure, we verify the region before contract signature.
§ 1.7Your rights: access, rectification, erasure, restriction, portability, and objection under Articles 15–21 GDPR. Write to [email protected] and we will answer within one month. You may also lodge a complaint with the Hungarian supervisory authority (NAIH, naih.hu).
§ 1.8Security measures include encrypted transport (TLS), access-controlled workspaces, two-factor authentication for production systems, and pseudonymised backups. Report suspected incidents to [email protected]; we notify the authority within 72 hours where Article 33 GDPR requires it.