and data processing information for visitors of the conos.hu website
The operator of conos.hu (hereinafter: the Website) is Conos Mérnöki és Informatikai Szolgáltató Bt. (hereinafter: the Controller). By publishing this Privacy Statement and Data Processing Notice (hereinafter: the Privacy Statement), the Controller sets out its principles of data processing, which it acknowledges as binding upon itself. The Controller takes all measures that can reasonably be expected of it to ensure the security of the personal data it processes.
Please read this Privacy Statement before using our Website. It explains in plain language how we process your personal data. In the Privacy Statement, the Controller informs data subjects clearly and in detail about all important facts concerning the processing of data.
In operating the website, the Controller processes the data of persons registered on the site in order to be able to provide them with an appropriate service. The service provider intends to comply fully with the legal requirements applicable to the processing of personal data, in particular those of Regulation (EU) 2016/679 of the European Parliament and of the Council.
This data processing notice is based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, taking into account Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information.
Personal data: any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, a number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data subject: any natural person identified by, or directly or indirectly identifiable on the basis of, specific personal data
Consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Data processing: any operation or set of operations performed on data, regardless of the procedure applied, in particular collection, recording, organisation, storage, alteration, use, retrieval, transmission, disclosure, alignment or combination, blocking, erasure and destruction, as well as preventing further use of the data, taking photographs, sound or image recordings, and recording physical characteristics suitable for identifying a person.
Erasure of data: rendering data unrecognisable in such a way that it can no longer be restored
Processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
Technical processing of data: performing the technical tasks connected with data processing operations, regardless of the method and means used to carry out the operations and of the place of application, provided that the technical task is performed on the data
Data set: the totality of the data managed in one register
Personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
Recipient: a natural or legal person, public authority, agency or other body to which the personal data are disclosed, whether a third party or not. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
Third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Information society service: a service provided by electronic means, at a distance, normally for remuneration, which the recipient of the service accesses individually
Electronic commerce service: an information society service whose purpose is the commercial sale, purchase, exchange or other form of use of a movable thing capable of being possessed and traded - including money and securities, as well as natural forces that can be utilised like a thing -, of a service, of immovable property or of a right having pecuniary value (hereinafter together: goods).
GDPR (General Data Protection Regulation): the European Union's new Data Protection Regulation;
Users are all natural persons who use the services of the Website and who are identified by, or directly or indirectly identifiable on the basis of, any specific personal data.
Below we describe which personal data we process on the Website and in the Conos project portal (portal.conos.hu), for what purpose and on what legal basis, who receives the data and how long we keep it.
Data processed:
Purpose: providing the project portal service (access control, document sharing, collaboration, notifications) and customer support.
Legal basis: for the subscribing company, performance of a contract (Article 6(1)(b) GDPR); for users invited by the subscribing company, the legitimate interest of the Controller and of the subscribing company in operating and securing the portal (Article 6(1)(f) GDPR).
Source and recipients: the data are provided by the data subject or by the project administrator of the subscribing company. Other participants of the project can see the data according to their permissions (for example names and contact details on the “Contacts” list); the Controller and the network infrastructure provider (T-Systems Magyarország Zrt.) have access to the data to the extent necessary to provide the service.
Retention: we process the data of a user account for as long as the account exists; after the account is closed (at the request of the user or the project administrator, or when the subscription ends) we delete it within 90 days, unless the law requires longer retention or the data are needed to establish, exercise or defend legal claims (the general limitation period is 5 years). Project content is kept as instructed by the subscribing company, for the duration of the project or subscription and, where the archiving service is used, for the agreed period.
Data processed: name (optional), email address, phone number (optional) and the content of the message; when the message is sent, the visitor’s IP address and the browser information collected by Google reCAPTCHA for spam protection.
Purpose: answering the inquiry, making offers, arranging a demonstration, preparing a contract.
Legal basis: taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR); for other inquiries, the Controller’s legitimate interest in answering inquiries (Article 6(1)(f) GDPR); the use of reCAPTCHA is based on the legitimate interest in protecting the form against spam and abuse (Article 6(1)(f) GDPR).
Recipients: the message is received by email by the staff member in charge of handling inquiries; the reCAPTCHA check is carried out by Google (see section 7).
Retention: we keep the message and related correspondence until the inquiry is closed and, if no contract is concluded, for 12 months after the last contact, and then delete it. If a contract is concluded, the rules for customer relationship data apply (see 5.1).
Cookies are placed on the user's computer by the websites visited and contain information such as the site's settings or login status. Cookies are thus small files created by the websites you visit. By saving browsing data they improve the user experience. With the help of cookies, the website remembers the site's settings and offers locally relevant content.
The service provider's website sends a small file (cookie) to the computer of visitors of the Website so that the fact and time of the visit can be determined. The service provider informs the visitor of the website about this.
Data subjects: visitors of the website.
Purpose of data processing: additional services, identification, tracking of visitors.
Legal basis of data processing: the user's consent is not required where the service provider absolutely needs the cookies.
Scope of data: unique identifier, time, settings data.
Users can delete cookies from their browsers at any time in the Settings menu.
Controllers entitled to access the data: through the strictly necessary cookies the controller does not process personal data; for the additional cookies set with consent (Google Analytics, Mida), the providers named below also receive the data (online identifiers and technical data).
Manner of data storage: electronic.
Our website uses Google Analytics. Google Analytics compiles reports for its customers on the habits of website users, based on internal cookies. On behalf of the website operator, Google uses the information to evaluate how users use the website. As an additional service, it prepares reports on website activity for the website operator so that the operator can provide further services. The data are stored on Google's servers in encrypted form to make misuse of the data more difficult and to prevent it.
Google Analytics can be disabled as follows. Quote from the page:
Website users who do not want Google Analytics JavaScript to report on their data can install the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sending information to Google Analytics. The browser add-on can be used in most modern browsers. The Google Analytics opt-out add-on does not prevent data from being sent to the website itself or to other web analytics services.
https://support.google.com/analytics/answer/6004245?hl=en
Google's privacy policy: https://policies.google.com/privacy?hl=en
Apart from the cookies that are strictly necessary for its operation (for example remembering the language setting and the cookie choice), the Website uses additional cookies and external scripts only with the consent of the data subject. The legal basis for the use of additional cookies is the consent of the data subject (Article 6(1)(a) GDPR). By default we use only the strictly necessary cookies. Additional cookies and external scripts are loaded only if the visitor expressly allows them by clicking the "Cookie settings" link in the footer of the page; there, consent can be given by category and withdrawn again later. We keep the decision in the browser's local storage (localStorage) for 12 months.
With consent, the Website loads the script of the Mida A/B testing service, which uses cookies and identifiers to compare different versions of the page.
With consent, the Website displays the review badges of SourceForge and Top Business Software using scripts loaded from third parties. Without consent, only a simple link to the review sites is shown.
The data processed in the project portal are handled by the Controller and the network infrastructure provider (T-Systems Magyarország Zrt., Hungary). The data of Website visitors may be transferred outside the EU/EEA in the following cases:
For these services the transfer takes place with your consent – except for the reCAPTCHA check of the contact form – and you can withdraw your consent at any time via the “Cookie settings” link in the footer of the page. You can ask for further information about the safeguards at portal@conos.hu.
Using the contact details provided, you may ask us for information on what data of yours our company processes, on what legal basis, for what processing purpose, from what source and for how long. At your request we will send the information without delay, but within 30 days at the latest, to the email address you have given us.
Using the contact details provided, you may ask us to amend any of your data. At your request we will arrange this without delay, but within 30 days at the latest, and send information to the email address you have given us.
Using the contact details provided, you may ask us to erase your data. At your request we will do so without delay, but within 30 days at the latest, and send information to the email address you have given us.
Using the contact details provided, you may ask us to restrict (block) your data. The restriction lasts for as long as the reason you have indicated makes storage of the data necessary. At your request we will do so without delay, but within 30 days at the latest, and send information to the email address you have given us.
Using the contact details provided, you may object to the data processing. We will examine the objection within the shortest possible time from its submission, but within 15 days at the latest, decide whether it is well founded, and inform you of our decision by email.
Where we process your personal data on the basis of consent or a contract and by automated means, you may ask us, using the contact details provided, to receive the data you have provided to us in a structured, commonly used, machine-readable format, and to transmit them to another controller. At your request we will do so without delay, but within 30 days at the latest, and send information to the email address you have given us.
If you experience unlawful data processing, please notify our company so that lawful conditions can be restored within a short time. We will do everything in your interest to resolve the problem described. If, in your judgement, lawful conditions cannot be restored, please notify the authority at the following contact details:
Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH)
This Privacy Notice entered into force on 23 May 2020. The controller reserves the right to make changes.
Last updated: 22 October 2026 (data processed and retention periods, cookies and management of consent, transfers outside the EU/EEA, data portability, contact email address).