Privacy and Cookie Notice
Last updated: 25 October 2026
1. About this notice
This notice explains how Ways Tech International Kft. handles personal data when you visit ways.hu, contact us, request a proposal or do business with us.
It covers website operations, enquiries, business communications, invoicing and accounting, as well as cookies and similar technologies.
2. Who is responsible for your data?
Ways Tech International Korlátolt Felelősségű Társaság (short name: Ways Tech International Kft.) is the controller responsible for the processing described in this notice. We refer to the company as “we”, “us” or “our”.
| Registered office | 1071 Budapest, Dembinszky utca 20. alagsor 2. ajtó, Hungary |
| Company registration no. | Cg.01-09-442842 |
| Tax ID (adószám) | 32791725-2-42 |
| Country of incorporation | Hungary |
For privacy questions or to exercise your data protection rights, email info@ways.hu or write to our registered office.
3. Running and protecting the website
When you visit the website, the infrastructure used to deliver it processes technical information. This may include your IP address, the time of access, the page or resource requested, the result of the request, and information about your browser and device.
We use this information to:
- make the website available;
- identify and resolve technical problems; and
- prevent and investigate unauthorised access, misuse and cyberattacks.
Legal basis: our legitimate interests under Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our interest is to keep the website secure, reliable and available.
Vercel provides the website hosting and delivery infrastructure. Supabase provides the database service.
We keep technical logs only for as long as needed to operate the website, troubleshoot problems and carry out security checks. If a security incident occurs, we may retain the relevant extracts separately for the investigation and for any related legal claims.
4. Contacting us and requesting a proposal
When you contact us, we use the information you provide to respond and deal with your request.
4.1. Information we use
Depending on what you provide, this may include:
- your name and email address;
- your telephone number;
- your company name and job title;
- your message and any attachments; and
- subsequent correspondence and the dates of our communications.
4.2. Why we use it and our legal basis
We use this information to answer questions, understand your requirements and prepare a proposal.
If you are asking us to enter into a contract with you personally, we rely on Article 6(1)(b) GDPR: taking steps at your request before entering into a contract.
For general enquiries and communications with someone acting on behalf of an organisation, we rely on our legitimate interests under Article 6(1)(f) GDPR. Our interest is to respond to enquiries and maintain business communications.
4.3. How long we keep it
We keep general enquiries and proposal requests that do not lead to a contract for 12 months after the last substantive communication.
If we enter into a contract, we retain the information needed for that relationship and any related legal claims as described in section 5.
Without the information needed to address your enquiry, we may not be able to respond. Please do not send sensitive information or special categories of personal data unless they are necessary for your request.
5. Contracts and business relationships
5.1. Information we use and why
We process the names, job titles and business contact details of individual clients and contacts at client organisations. We also process correspondence and other information needed to arrange, perform and document our services.
We use this information to prepare and perform contracts, coordinate work, keep records of delivery and deal with legal claims.
5.2. Legal basis
- Contracts with individual clients: performance of a contract under Article 6(1)(b) GDPR.
- Communications with contacts at organisations: our legitimate interest in managing the business relationship under Article 6(1)(f) GDPR.
- Records retained for legal claims after a contract ends: our legitimate interest in establishing, exercising or defending legal claims under Article 6(1)(f) GDPR.
5.3. How long we keep it
We retain contracts and the delivery records needed for potential legal claims for five years after the contract ends. Relevant records may need to be kept longer if a limitation period is suspended or interrupted, or if proceedings are ongoing.
We update or delete outdated contact details when they are no longer needed. Accounting records are subject to the separate retention requirements below.
6. Invoicing, accounting and tax advice
6.1. Information we use
We process the information needed to issue invoices and meet accounting and tax obligations. This includes, where applicable:
- billing name and address;
- tax number;
- the email address used to deliver invoices;
- a description of the services, fees and dates of supply;
- invoice and payment references; and
- information contained in supporting financial and accounting documents.
6.2. Purpose and legal basis
We use this information to issue and manage invoices, maintain accounting records, meet tax obligations and support related checks.
Legal basis: compliance with legal obligations under Article 6(1)(c) GDPR, in particular applicable Hungarian accounting and tax legislation.
6.3. How long we keep it
We retain accounting documents supporting bookkeeping entries for at least eight years under section 169 of Hungary’s Act C of 2000 on Accounting.
6.4. Service providers
We use Számlázz.hu for invoicing. Adó-CAD Könyvelő és Mérnöki Kft. provides accounting and tax advisory services.
These providers receive the billing, financial and supporting information needed for their work. Their accounting or invoicing role does not, by itself, give them access to website browsing data.
7. Cookies and similar technologies
7.1. What these technologies do
Cookies are small files stored in your browser. Websites may also use browser storage, tracking pixels and other electronic identifiers.
These technologies can help a website work, remember your choices or measure activity associated with advertising.
7.2. Strictly necessary technologies
We do not request consent for technologies that are strictly necessary to operate the website or provide a feature you specifically request. Examples may include remembering your cookie choices or maintaining website security.
Where these technologies involve personal data, the GDPR legal basis depends on the purpose. For security and implementing your privacy choices, this is generally our legitimate interest under Article 6(1)(f) GDPR.
7.3. Advertising and conversion measurement
We use Google and Meta advertising services. Website tracking associated with these services may measure whether an advertisement led to a visit, enquiry or other defined action. With consent, it may also be used to create remarketing audiences.
Depending on the tools enabled, the information processed may include:
- browser and advertising identifiers;
- IP addresses and device information;
- the address of the page visited;
- visit times and recorded events;
- advertising click identifiers; and
- consent status.
We request your consent before using non-essential cookies and the associated personal data processing. The GDPR legal basis is consent under Article 6(1)(a).
Opening the website, scrolling or continuing to browse does not count as consent.
7.4. Your choices
You can accept or reject non-essential technologies through the cookie controls. Rejecting them must not prevent access to the website’s basic content.
You can change your choices or withdraw consent through “Cookie settings”. Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal.
You can also delete cookies through your browser settings. Blocking strictly necessary cookies may affect some website features.
7.5. Cookie expiry and data retention
A cookie’s lifetime determines how long the identifier remains in your browser. It does not necessarily determine how long a provider keeps the information associated with it.
The final cookie list must identify the technologies actually used on the website, their purposes and their expiry periods.
8. Who receives your data?
Access is limited to our staff and service providers who need the information to carry out their work.
8.1. Website hosting and database services
| Provider | Address | Role and information involved |
|---|---|---|
| Vercel Inc. | 440 N. Barranca Ave #4133, Covina, CA 91723, United States | Website hosting and delivery; technical request data and content processed through the service. |
| Supabase Pte. Ltd. | 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513, Singapore | Database services; personal data that we store in the database. |
Further information is available in the providers’ privacy and data processing documentation.
8.2. Invoicing, accounting and tax advice
| Provider | Registered office | Role |
|---|---|---|
| KBOSS.hu Kereskedelmi és Szolgáltató Kft. — Számlázz.hu | 1031 Budapest, Záhony utca 7., Hungary | Invoice creation, storage and management. |
| Adó-CAD Könyvelő és Mérnöki Kft. | 5600 Békéscsaba, Kodály Zoltán utca 6., Hungary | Accounting, tax advice and related accounting and tax administration. |
8.3. Advertising providers
| Provider | Address | Services |
|---|---|---|
| Google Ireland Limited | Gordon House, Barrow Street, Dublin 4, Ireland | Advertising services, with conversion measurement and remarketing depending on configuration and consent. |
| Meta Platforms Ireland Limited | Merrion Road, Dublin 4, D04 X2K5, Ireland | Facebook and Instagram advertising, with event measurement and remarketing depending on configuration and consent. |
The role of Google and Meta depends on the product and the particular processing activity. They do not act solely as our processors for every activity.
When Meta business tools are used, we and Meta may act as joint controllers for the collection of specified information and its transmission to Meta. The relevant joint controller arrangement covers that collection and transmission; Meta’s subsequent processing is separate.
8.4. Authorities and other legally entitled recipients
We disclose personal data to authorities, courts or other recipients where required by law or a binding request. Invoice information may also be reported to the tax authority as required by law.
9. Processing outside the European Economic Area
Using Vercel, Supabase, Google and Meta may involve processing outside the European Economic Area (EEA), including access from outside the EEA.
The applicable service terms and data protection arrangements determine the safeguards used for a transfer. These may include a European Commission adequacy decision or Standard Contractual Clauses, together with supplementary safeguards where needed.
Vercel’s privacy notice describes its participation in the EU–US Data Privacy Framework. For Supabase, selecting an EU region determines the location of the main database but does not, by itself, rule out all support or operational access from other countries.
You can request more information about transfers affecting your data and the safeguards used by emailing info@ways.hu.
10. Security and deletion
We apply technical and organisational measures appropriate to the nature and risks of the processing. Access to personal data is limited to what is needed for the relevant work.
When the retention period ends, we delete the information or irreversibly anonymise it, unless a legal requirement or a specific legal claim justifies keeping it longer.
Information in backups is removed in accordance with the backup overwrite and deletion cycle. We do not use backup information for new purposes unrelated to the original processing.
11. Your rights
Subject to the conditions set out in the GDPR, you can:
- ask whether we process your personal data and obtain access to it and a copy;
- ask us to correct inaccurate information;
- request deletion of your personal data;
- request a restriction on processing;
- object to processing based on legitimate interests for reasons relating to your particular situation;
- receive and transfer your data where the right to data portability applies; and
- withdraw consent at any time.
You can object to processing for direct marketing at any time. If you do, we will stop using your data for that purpose.
The right to deletion does not require us to delete invoices or accounting records that we must retain by law.
Send requests to info@ways.hu or our registered office.
We respond without undue delay and normally within one month of receiving a request. Where necessary because of the complexity or number of requests, we may extend this by up to two further months. We will explain the extension and the reasons within the first month.
If we have reasonable doubts about a requester’s identity, we may ask for the additional information needed to verify it.
12. Complaints and legal remedies
If you have a concern about how we handle your data, you can contact us at info@ways.hu. You do not have to contact us before approaching a supervisory authority or a court.
The Hungarian supervisory authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
- Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary.
- Postal address: 1363 Budapest, Pf. 9., Hungary.
- Telephone: +36 (1) 391-1400.
- Customer service email: ugyfelszolgalat@naih.hu.
- Website: https://naih.hu
NAIH states that a formal authority procedure cannot be initiated by ordinary email. Its website explains the available submission channels.
You may lodge a complaint with the competent supervisory authority and seek a remedy before a court if you believe your rights have been infringed.
13. Changes to this notice
We update this notice when our processing activities or service providers change. The current version is available on the website.
Publishing or updating this notice does not constitute your consent and does not replace consent where it is required for a new processing activity.