Privacy notice

This is an English translation of the Hungarian privacy notice. The Hungarian version is the official one and prevails in case of any discrepancy.

ENEOPT IT Szolgáltató Kft. hereby informs you about the following regarding the personal data it processes in connection with this website.

ENEOPT IT Szolgáltató Kft. (registered office: 1149 Budapest, Nagy Lajos király útja 205. fsz. 1. ajtó, tax number: 32169229-2-42; company registration number: 01-09-410071) processes your personal data in accordance with this privacy notice.

1. The data controller, persons authorized to process data, and the data protection officer

The Data Controller is ENEOPT IT Szolgáltató Kft.

ENEOPT IT Szolgáltató Kft. has appointed a data protection officer, whose details are:

Name: dr. Tóth Gergely Email address: [email protected] (please include the word "Adatkezelés" (data processing) in the subject line of your message)

2. Personal data processed in connection with job applications

2.1. Legal bases and purposes of processing

If you send ENEOPT IT Szolgáltató Kft. your CV or other documents containing your personal data, you voluntarily and expressly consent to ENEOPT IT Szolgáltató Kft. processing the submitted documents, your name and your email address for the purpose of evaluating applications for the advertised position.

2.2. Scope of the data processed and duration of processing

CVs and other related documents typically contain the following data: name, home address, phone number, email address, education, previous employers, qualifications, skills, references, positions applied for, salary expectations.

Your consent is valid from the time you send your application until the position is filled. You can withdraw your consent at any time using the data controller's contact details. We delete the data immediately after the position is filled or after you withdraw your consent. Please note that withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

2.3. Recipients of the personal data

The recorded personal data can only be accessed by the persons at the company involved in evaluating applications for the position. We store CVs on Google Drive; CVs and other documents are received at [email protected]. The website developer:

Name: ENEOPT IT Szolgáltató Kft. Registered office: 1149 Budapest, Nagy Lajos király útja 205. fsz. 1. ajtó Tax number: 32169229-2-42

3. Personal data processed in connection with unsuccessful job applications

3.1. Legal bases and purposes of processing

You have sent ENEOPT IT Szolgáltató Kft. your CV or other documents containing your personal data, and you thereby voluntarily and expressly consent to the processing of the submitted documents, your name and your email address, so that we can use them to evaluate applications for a position that may become vacant in the future.

3.2. Scope of the data processed and duration of processing

CVs and other related documents typically contain the following data: name, home address, phone number, email address, education, previous employers, qualifications, skills, references, positions applied for, salary expectations.

ENEOPT IT Szolgáltató Kft. processes the data only for 12 months from the date of this notice; however, you can withdraw your consent at any time before this period expires using the data controller's contact details. Please note that withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

We process the data for 12 months or until you withdraw your consent, and delete it afterwards.

3.3. Recipients of the personal data

The recorded personal data can only be accessed by the persons at the company involved in evaluating applications for the position. We store CVs on Google Drive; CVs and other documents are received at [email protected]. The website developer:

Name: ENEOPT IT Szolgáltató Kft. Registered office: 1149 Budapest, Nagy Lajos király útja 205. fsz. 1. ajtó Tax number: 32169229-2-42

4. Notice on personal data processed in connection with the contact details provided on the website

4.1. Legal bases and purposes of processing

The legal basis for processing the personal data is your voluntary declaration of consent. We process the data in order to identify you and to respond to you.

When you send the contact form on the website, you give your consent by ticking the checkbox that confirms you accept the privacy notice; the form cannot be sent without it. The same consent applies where the enquiry is sent on your behalf by a browser AI assistant that fills in the form for you, or by an AI assistant (for example ChatGPT) using the website's MCP server: by using the assistant you request that the message be sent.

4.2. Scope of the data processed and duration of processing

When you contact us, we process your name, email address and phone number. The data is processed until the inquiry in question is closed.

On the contact form (and through the AI assistant channels) we ask for: name, email address, the text of your message and, optionally, your company name and phone number. The system assigns the message an enquiry reference, which the form displays after sending. The notification email also records the channel (form, AI assistant or other), the selected language, the page the enquiry was sent from, the time of receipt and, if there is one, the source of the enquiry (the ad campaign utm_ parameters, and whether there was an ad click identifier; see section 5.3). We do not store the data in a database: the enquiry remains only in the notification email at [email protected]. We do not send a confirmation email.

As protection against abuse (spam) and overload, the form uses a hidden check field and verifies that it was not filled in faster than a person can; these contain no personal data. For the same purpose the server limits the number of enquiries from one IP address and from one email address. For this, the IP address and the email address are kept only in the server's memory, for a short time (at most one day); they are not logged or stored permanently. The server log records only the enquiry reference, the channel and the outcome (for example “sent”) of an enquiry, and not the name, email address or text of the message.

You can withdraw your consent at any time using any of the contact details below. Please note that withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

4.3. Recipients of the personal data

The provider's sales staff can access the data provided, only to the extent necessary to fulfill what is indicated or requested in the message. Our server forwards the enquiry by email to [email protected]; the email is sent by the own mail infrastructure of ENEOPT IT Szolgáltató Kft., and we do not pass the data to a third-party provider.

If you send the enquiry through an AI assistant (for example ChatGPT), the assistant's provider handles the conversation as an independent data controller under its own privacy policy; we have no say in that, and we receive the data you give there only when the enquiry is sent. The website developer:

Name: ENEOPT IT Szolgáltató Kft. Registered office: 1149 Budapest, Nagy Lajos király útja 205. fsz. 1. ajtó Tax number: 32169229-2-42

5. Cookies and website traffic measurement

5.1. What we use

To measure website traffic statistically, we use the Google Tag Manager tag management system and the Google Analytics 4 (GA4) analytics service, only with your consent. Only Google Analytics tags run in Google Tag Manager; we do not use remarketing tags.

In addition, only with a separate consent given by you, we measure whether visitors who arrive from our ads shown in OpenAI's ChatGPT contact us. For this we use OpenAI's Measurement Pixel and OpenAI's server-side Conversions API. This consent is independent of the consent to traffic measurement: you can give or refuse one without the other.

When you first open the website, a panel lets you decide whether you consent to measurement. Until you consent, Google services are not loaded, no data is transferred to Google, and no analytics cookie is placed on your device. Declining consent has no disadvantage for you; the website remains fully usable. You can change or withdraw your decision at any time by clicking the “Cookie settings” link in the website's footer; withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Until you consent to ad measurement, OpenAI's measurement pixel is not loaded, your browser sends no request to OpenAI, no OpenAI cookie is placed on your device, and we send no server-side report to OpenAI. When you withdraw your consent, we delete the pixel's cookies. You can change your ad measurement decision separately from your traffic measurement decision, in the same way, with the “Cookie settings” link.

Your decisions are saved on your device, in your browser's local storage (localStorage), so that you don't have to repeat it on every visit. This storage is necessary for the website's requested functionality (remembering your choice) and does not contain personal data.

If you give your consent, Google signals and ad personalization remain switched off, the website does not use a user ID (User-ID), and we do not send data entered on the website to the analytics system.

5.2. Legal basis and purpose of processing

The legal basis for processing is your consent (Article 6(1)(a) GDPR), together with consent under the Hungarian rules on electronic commerce services for placing cookies on your device. Consent is voluntary and can be withdrawn at any time. The purpose of processing is to improve the website's content and usability based on statistics and, if you give the separate consent to ad measurement, to measure the effectiveness of our ChatGPT ads.

5.3. Scope of the data processed and duration of processing

The website may place the following cookies. The _ga and _ga_<ID> cookies, and the __oppref and __obref cookies, are placed on your device only with your respective consent; the __cf_bm cookie is necessary for the website to work and may therefore be placed without consent:

During measurement, only data that could be used for general fingerprinting reaches Google's servers. Google Analytics 4 does not log or store IP addresses; at most an approximate geographic location (country, region) derived from them appears in the reports.

When consent is given, or later changed, the measurement also records an event that contains only the fact of the decision and whether the visitor changed it, and no personal data.

We keep event-level data in Google Analytics for 2 months, after which it is deleted automatically.

Ad measurement (OpenAI)

If you have consented to ad measurement and you send the contact form on the website (or start a contact through the website's MCP server or a browser assistant that fills in the form), we report a “lead_created” (lead created) event to OpenAI. Both your browser (the measurement pixel) and our server (the Conversions API) send it, with the same enquiry reference so that OpenAI counts the event once. The report contains: the event type and time, the enquiry reference, the address of the page the enquiry was sent from, the __oppref ad click identifier and the __obref browser identifier. We do not send the content of the enquiry (name, email address, phone number, message) to OpenAI. When the measurement pixel is used, OpenAI may also receive technical data from the browser (for example the IP address and browser details).

In the internal notification email about a contact enquiry we also record the source of the enquiry: the ad campaign parameters (parameters starting with utm_) and whether there was an OpenAI ad click identifier. The email does not contain the value of the identifier.

OpenAI processes the data to measure the effectiveness of ads, in accordance with its own privacy policy. The events serve to measure ad effectiveness; we do not carry out automated decision-making.

Cookies necessary for operation

The hosting and network infrastructure serving the website (Cloudflare, Inc.) may place cookies that are technically essential for the website's operation and security (for example, a cookie for bot protection or load balancing, such as __cf_bm). These do not serve statistical, advertising or profiling purposes, they are short-lived, and they are necessary to provide the service requested from the website, so your consent is not required for placing them and they cannot be switched off. The names and expiry of these cookies are listed in the provider's documentation: https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/.

5.4. Recipients of the personal data, data transfers

The data processor is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which may also process the data in cooperation with Google LLC (USA). Data is transferred to the United States under the EU–US Data Privacy Framework, which is based on an adequacy decision of the European Commission and in which Google LLC participates. We have accepted the Data Processing Amendment with Google. Details on Google's data processing: https://policies.google.com/privacy.

If you have consented to ad measurement, the recipient of the data is OpenAI (the provider of the measurement pixel and the Conversions API), which may also process the data in the United States. Data is transferred to the United States on the basis of the appropriate safeguards under Chapter V of the GDPR applied by OpenAI. Details on OpenAI's data processing: https://openai.com/policies/privacy-policy/.

Website hosting and network protection are provided by Cloudflare, Inc. as a data processor.

The recorded data is processed by employees of ENEOPT IT Szolgáltató Kft. We do not carry out automated decision-making, and we do not collect personal data about you from third parties. The website developer:

Name: ENEOPT IT Szolgáltató Kft.
Registered office: 1149 Budapest, Nagy Lajos király útja 205. fsz. 1. ajtó
Tax number: 32169229-2-42

6. Notice on personal data processed in connection with user testing

6.1. Legal bases and purposes of processing

The legal basis for processing the personal data is your voluntary declaration of consent. We process the data in order to identify you, evaluate the tests and respond to you.

The purpose of processing is to test the usability of the online interface we have built and to collect user feedback to improve the interface.

6.2. Scope of the data processed and duration of processing

The following data is processed and stored while the test is carried out:

• Name
• Email address
• Phone number
• Screen recording of the testing process

The data is processed until the project in question is closed, but for no more than 30 days, after which it is deleted.

You can withdraw your consent at any time using any of the contact details below. Please note that withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

6.3. Recipients of the personal data

The data provided can be accessed by our staff involved in testing.

7. Processing personal data of persons under 16

The personal data of a person under the age of 16 may only be processed with the consent of the adult exercising parental authority over them. The data controller is not in a position to verify the eligibility of the consenting person or the content of their declaration, so the user, or the person exercising parental authority over them, warrants that the consent complies with the law. In the absence of a declaration of consent, the data controller does not collect personal data relating to a data subject under the age of 16. If we become aware that we have collected personal data from a child under 16, we will take the steps necessary to delete the data as soon as possible.

8. Your rights

You have the right at any time to request information from ENEOPT IT Szolgáltató Kft. about the personal data concerning you that we process and that is named in this notice, about the purpose, legal basis and duration of the processing, and about who receives or has received your data and for what purpose. (for each type of processing)

You have the right at any time to request ENEOPT IT Szolgáltató Kft. to rectify your inaccurate personal data or to complete your incomplete personal data. (for each type of processing)

You have the right at any time to request our company to transfer the personal data we hold about you in electronic form to you, or to another data controller, in a commonly used format. (for each type of processing)

You have the right at any time to request ENEOPT IT Szolgáltató Kft. to restrict processing. If processing is restricted, ENEOPT IT Szolgáltató Kft. may, apart from storing the personal data, process it only with your consent, for the establishment, exercise or defense of legal claims, or for the protection of the rights of another person. You may request the restriction of processing of your personal data if

you contest the accuracy of the personal data, the processing is unlawful and you oppose the erasure of the personal data, ENEOPT IT Szolgáltató Kft. no longer needs the personal data for the purposes of processing but you require them for the establishment, exercise or defense of legal claims, or ENEOPT IT Szolgáltató Kft. informs you before the restriction of processing is lifted. (for each type of processing)

You have the right at any time to request ENEOPT IT Szolgáltató Kft. to erase your personal data. ENEOPT IT Szolgáltató Kft. erases your personal data if

ENEOPT IT Szolgáltató Kft. no longer needs the personal data for the purpose for which it collected or processed them, you object to the processing on grounds relating to your particular situation and there are no overriding legitimate grounds for the processing, your personal data have been processed unlawfully, or ENEOPT IT Szolgáltató Kft. is required to erase the personal data to comply with a legal obligation. ENEOPT IT Szolgáltató Kft. investigates requests related to data processing within no more than 30 days of their submission, decides whether they are justified, and informs the requester of its decision in writing. (for each type of processing)

9. Complaints

If you believe that ENEOPT IT Szolgáltató Kft. has not processed your personal data as described in this notice, or that you have not been able to fully exercise your rights, please contact us using any of our data protection officer's contact details above.

If your rights relating to your personal data are violated, you can submit a complaint to the authority using the following contact details:

If your rights are violated in the course of processing your personal data, you can also turn to the courts.
Effective date: October 19, 2026, version: 1.4