Privacy notice

This notice explains what personal data this website collects, why we collect it, how long we keep it and what you can do about it. It is written for the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

1. Who is responsible

The data controller is Platt 2003 Kft., H-3324 Felsőtárkány, Berva Ipartelep 2411 hrsz., Hungary. For anything in this notice, write to privacy@platt.hu. We have not appointed a data protection officer, because we are not required to.

2. What we collect, and why

2.1 The contact form

When you send us an enquiry we collect your name, phone number, company, country, what you build, your yearly volume, your message and any drawing file you attach.

• Purpose: to answer your enquiry and prepare a quotation.
• Lawful basis: steps taken at your request before entering a contract, GDPR Article 6(1)(b).
• Retention: 24 months from the last contact, unless the enquiry becomes an order — then it is kept with the contract records for the statutory period.
• Giving it is voluntary. Without it we cannot answer you.

A drawing you attach may be confidential. We treat it as confidential, we use it only to assess and quote your enquiry, and we never send it to a third party without asking you first.

2.2 Server logs

Our hosting provider records the usual technical data for each request: IP address, time, page requested, browser type. This is used to keep the site running and secure, on the basis of our legitimate interest, GDPR Article 6(1)(f). Logs are kept for a short period by the provider and are not used to profile you.

2.3 Measurement and cookies

We want to know which pages are read and which are not. Any measurement runs only after you accept it in the cookie banner, on the basis of your consent, GDPR Article 6(1)(a). You can refuse, and you can change your mind at any time using "Cookie settings" at the bottom of every page. Refusing changes nothing about how the site works for you.

2.4 The corporate film (YouTube)

The film on our home page is hosted on YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Until you press play, the page shows only a picture stored on our own server, and nothing is sent to YouTube. When you press play, the player loads from youtube-nocookie.com. YouTube then receives your IP address, browser data and the page the film is on, may store data on your device, and may process it outside the EEA. This happens on the basis of your consent, given by pressing play, GDPR Article 6(1)(a). Do not press play if you do not want this. What Google does with the data is set out in Google's privacy policy.

2.5 Spam protection (Cloudflare Turnstile)

To keep automated spam out of the contact form, the form uses Cloudflare Turnstile, a service of Cloudflare, Inc. When you reach the form, Turnstile runs a short check in your browser and sends Cloudflare technical data such as your IP address and browser characteristics. It sets no advertising cookies and does not track you across other sites. This happens on the basis of our legitimate interest in a form free of spam, GDPR Article 6(1)(f). Your enquiry itself then reaches us by email through Resend, our email delivery provider. Details: Cloudflare's privacy policy.

3. Cookies and local storage

This site sets no advertising cookies and no third-party tracking cookies. The YouTube player in 2.4 is the one exception, and it loads only if you press play. The site itself uses browser local storage for two small values.

Both are strictly necessary and are kept whichever answer you give. No measurement tool is installed on this site at the time of writing. If one is added, it will appear in this table before it goes live, and it will run only with your consent.

4. Who else sees your data

• Our hosting provider, which operates the servers this site runs on.
• Our email provider, which carries your enquiry to our sales team.
• Our own staff — sales and engineering — who prepare your answer.

These providers act as processors under a written contract. We do not sell your data, and we do not use it for advertising.

5. Transfers outside the EEA

We keep data inside the European Economic Area wherever we can. If a provider processes data outside it, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision. Write to privacy@platt.hu for the current list.

6. Your rights

Under the GDPR you may ask us to:

• Access — tell you what we hold about you and give you a copy.
• Rectify — correct anything that is wrong.
• Erase — delete it, where the law allows.
• Restrict — pause our use of it while a question is settled.
• Port — hand it to you, or to another company, in a machine-readable file.
• Object — stop processing we base on legitimate interest.
• Withdraw consent — at any time, without giving a reason. This does not undo what was lawful before.
• Not be subject to automated decisions. We make none. There is no profiling on this site.

Write to privacy@platt.hu. We answer within one month. We may ask you to confirm who you are first.

7. If you are not satisfied

You can complain to the Hungarian supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11, naih.hu. You may also complain to the authority in the EU country where you live or work.

8. Security

The site is served over HTTPS. Enquiries and attachments are held on access-controlled systems, and only the staff who need them can open them. No system is perfect; if a breach ever puts your rights at serious risk, we will tell you.

9. Changes to this notice

If we change this notice we will change the version and date at the top of this page. Material changes to consent-based processing will be put to you again in the banner.

Questions: privacy@platt.hu