Privacy Policy

Introduction

4D Consulting Kft. (hereinafter: Service Provider, data controller) submits itself to the following prospectus. This privacy statement describes how the Service Provider collects, uses, and discloses your personal information when you visit or shop on our Website. On the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Regulation (EC) No 95/46 (General Data Protection Regulation) REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 2016 27.) we provide the following information. This Privacy Policy governs the privacy practices of the following pages: This Privacy Policy is available at: https://4dconsultingkft.com/. Changes to this Privacy Policy will be effective upon posting at the above address.

Data controller and contact details:

• Name: 4D Consulting Kft.
• Headquarters: 6000 Kecskemét, Károlyi utca 6.
• Mailing address: 6000 Kecskemét, Károlyi utca 6.
• Registering authority: Court of Registry of the Kecskemét General Court
• Company registration number: 03-09-135617
• Tax number: 27509928-2-03
• Representative: Roland Zónai (Managing Director)
• Email: roland.zonai@gmail.com
• Website: https://4dconsultingkft.com/

Hosting provider information

• Name: Cégem 360 Kft.
• Address: 1051 Budapest, Széchenyi István tér 7-8.
• E-mail address: tamas@cegem360.hu

Guidelines

Under the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), we will process your personal data on the following legal bases:

• your consent;
• fulfill the agreement between you and the Website;
• Compliance with our legal obligations;
• protection of vital interests;
• Carrying out a task in the public interest;
• For our legitimate interests that do not override your fundamental rights and freedoms.

How we handle your data

• is handled lawfully and fairly and in a manner that is transparent to the data subject ("legality, due process and transparency");
• they are collected only for specified, explicit and legitimate purposes and are not treated in a way incompatible with those purposes;
• they must be appropriate, relevant and limited to what is necessary for the purposes of the processing ("data saving");
• be accurate and, where necessary, kept up to date;
• it must be stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
• processing must be carried out in such a way as to ensure adequate security of personal data, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage to personal data ("integrity and confidentiality"), using appropriate technical or organizational measures.

Concepts

• "personal data" shall mean any information relating to an identified or identifiable natural person ("data subject");
• "processing" means any operation or set of operations on personal data or files;
• "controller" means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data;
• "processor" means any natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;
• "data subject's consent" means the voluntary, specific and duly informed and unambiguous expression of the will of the data subject;
• "data protection incident" means a breach of security resulting in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to, personal data.

1. Data management

1.1. Collection of personal data

When you visit the Website, we collect certain information about your device, how it interacts with the Website, and the information needed to process your purchases of consulting services.

1.1.1. Device information

• Examples of personal information collected: web browser version, IP address, time zone, cookie information, what websites or products you view, search terms, and interaction with the website.
• Purpose of collection: to load the Website accurately for you and to analyze the use of the Website in order to optimize our Website.
• Collection Source: Collection is done automatically when you access our Website through cookies, log files, web beacons, tags or pixels.

1.1.2. Ordering information

We offer consulting packages (e.g., EIC Accelerator consultation, Horizon Europe innovation consultation) via our webshop. When you purchase specific hours of consultation, you create an account to view your orders.

• Examples of personal data collected: Name, email address, billing address, VAT number (where provided), and order history.
• Purpose of collection: To provide you with services to fulfill our contract, process payment information, provide invoices, and communicate with you.
• Source of collection: We collect this directly from you when you register or make a purchase.
• Payment Processing: Payments are handled exclusively by our payment provider, Stripe. When you purchase a package, you are forwarded to Stripe to input your billing information. Stripe processes the payment.
• Invoicing: We use Billingo to generate invoices based on the purchase information provided via Stripe.

1.2. Who do we collect data from?

We collect the above-mentioned data from the users who register/buy consulting hours on the website. You can request a change to your information at any time at roland.zonai@gmail.com.

Minors: The Site is not intended for persons under the age of 18.

1.3. Use of personal data

We use your personal information to provide you with our services, process payments (via Stripe), and provide legally compliant invoices (via Billingo).

1.4. Sharing personal information

We share your personal information with service providers to help us provide our services:

• Stripe: Payments are handled by Stripe Payments Europe Ltd. (and Stripe, Inc.). Stripe acts as a processor for payment delivery and an independent controller for anti-money-laundering, fraud prevention, and regulatory compliance. Stripe Payments Europe Ltd. (Ireland) is our contracting entity; data is transferred to Stripe, Inc. in the United States under Stripe's Data Transfers Addendum and EU Standard Contractual Clauses, with Stripe certified under the EU-U.S. Data Privacy Framework. You can read more about Stripe's privacy practices at https://stripe.com/privacy.
• Billingo: We use Billingo (Octonull Kft. / Billingo Technologies Zrt.) as a processor for invoice issuance and as an independent controller for its own statutory accounting and tax reporting duties under Hungarian law (including reporting to the Hungarian Tax Authority - NAV). Billingo receives your name, email address, VAT number, and billing address. Data remains in Hungary (EEA).

We may also share your personal information to comply with applicable laws and regulations or to respond to lawful requests for information.

2. Management of cookies

A cookie is a small amount of information that is downloaded to your computer or device when you visit our Website. We use cookies, and comparable storage in your browser, for the purposes set out below. You choose which categories run when you first visit the Website, and you can change that choice at any time through the "Cookie Settings" link in the footer.

• Necessary: required for the Website to work — keeping your shopping cart and session during a purchase, security, and remembering the cookie choice you made. These are always active and cannot be switched off.
• Analytics: Google Analytics 4, loaded through Google Tag Manager, so we can see which pages are useful and how the Website is used. These only run once you allow them.
• Marketing: used for personalised advertising and remarketing. These only run once you allow them.

Until you allow a category, Google Consent Mode keeps the corresponding storage denied, so no analytics or advertising cookies are set. Blocking or deleting cookies in your browser settings is always possible as well, though the Website may then not work as intended.

3. How long do we store it?

We will store your data in our system for the duration of your registration. Invoicing data is kept for the period required by Hungarian accounting laws (generally 8 years).

4. Rights of data subjects

If you are in the EEA, you have the right to:

• Right of access: Request access to your personal data.
• Right to rectification: Request correction of inaccurate data.
• Right of cancellation (Right to be forgotten): Request deletion of your data.
• Right to restrict data processing: Request limits on how we use your data.
• The right to data portability: Request transfer of your data to another service.
• Right to protest (object): Object to the processing of your data.

You can request the deletion, modification, or access to your personal data by contacting us at:

• Email: roland.zonai@gmail.com

5. Data processors

Payment Processor:

• Name: Stripe Payments Europe Ltd. (and Stripe, Inc.)
• Role: Processor for payment delivery; independent controller for anti-money-laundering, fraud prevention and regulatory compliance.
• Data Transfer: Data is transferred to Stripe, Inc. in the United States under Stripe's Data Transfers Addendum and EU Standard Contractual Clauses.
• Privacy Policy: https://stripe.com/privacy

Invoicing Processor:

• Name: Billingo Technologies Zrt. (formerly Octonull Kft.)
• Headquarters: 1133 Budapest, Árbóc utca 6. I. emelet
• Role: Processor for invoice issuance; independent controller for its own statutory accounting and tax reporting duties under Hungarian law.
• Scope of data: Name, email address, VAT number (where provided), and billing address.

6. Security of data management

The controller and the processor shall take appropriate technical and organizational measures to guarantee a level of data security appropriate to the degree of risk.

7. Possibility to complain

Complaints against possible breaches of the data controller can be lodged with the National Data Protection and Freedom of Information Authority (NAIH):

• 1055 Budapest, Falk Miksa utca 9-11.
• Mailing address: 1363 Budapest, Pf. 9.
• Phone: +36 -1-391-1400
• E-mail: ugyfelszolgalat@naih.hu

8. Contact

If you have any questions or complaints, please contact us by email at roland.zonai@gmail.com or by mail at: 4D Consulting Kft., Károlyi utca 6., Kecskemét, 6000, Hungary