1. Data Controller

Company name: GMBS Design Kft.
Registered seat: 1071 Budapest, Damjanich utca 40. 6/7.
Company registration number: 01 09 413973
Tax number:  27036099242
E-mail: info [at] gmbsdesign.com
 

The Data Controller (hereinafter: the “Company” or “Data Controller”) is committed to protecting personal data. This Privacy Policy explains what personal data we collect, for what purpose, on what legal basis, and for how long we process them in relation to the contact form and career application functions on our website.

​

2. Purpose and Legal Basis of Data Processing

​

2.1. Contact Form

Data processed:

• Name

• E-mail address

• Phone number (optional)

• Content of the message

Purpose:
To respond to inquiries and maintain communication.

Legal basis:
Taking steps at the request of the data subject prior to entering into a contract;
and/or legitimate interest of the Data Controller to ensure effective communication.

​

2.2. Career / CV Submission

Data processed:

• Name

• Contact details (e-mail, phone)

• Personal data included in the CV (work experience, qualifications, etc.)

• Cover letter or other attachments (if provided)

Purpose:
Conducting recruitment processes, contacting candidates, assessing suitability.

Legal basis:
steps prior to entering into an employment contract;
consent (e.g., if the applicant agrees to keep their CV for future opportunities).

​

3. Retention Period

• Contact form submissions: up to 1 year after the inquiry is resolved, unless longer retention is required for legal claims.

• CVs and application materials:

  • for the duration of the recruitment process + up to 6 months;

  • if the applicant gives explicit consent, the data may be stored for an additional 12 months.

​

4. Data Transfers and Data Processors

Personal data are only shared with third parties when necessary:

• hosting provider: [name of provider]

• e-mail service provider: Microsoft

The Company does not disclose personal data for marketing purposes and does not send newsletters.

​

5. Cookies and External Services

The website currently does not use Google Analytics or any other analytics or marketing cookies.
Only essential, technical cookies may be used.
 

6. Rights of Data Subjects

Data subjects have the following rights under the GDPR:

• right of access

• right to rectification

• right to erasure (“right to be forgotten”)

• right to restriction of processing

• right to object (where processing is based on legitimate interest)

• right to data portability

• right to withdraw consent at any time (where processing is based on consent)

Requests will be fulfilled within 30 days in accordance with the GDPR.

​

7. Remedies

Data subjects may lodge a complaint with the competent supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9–11.

They may also seek remedy before the competent court (based on place of residence or domicile).

​

8. Data Security

The Company implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, and ensures regular security measures, including (where applicable) data encryption and controlled access.

​

9. Amendment of the Policy

The Company reserves the right to amend this Privacy Policy. Updated versions will be published on the website.