Privacy Policy

Last updated: 9 October 2026

1. Data Controller

The controller of personal data processed through this website is:

BNCcon Korlátolt Felelősségű Társaság

Registered office: 1037 Budapest, Testvérhegyi út 67., Hungary

Company registration number: 01-09-458157

Tax number: 33082477-2-41

Email: gabor.boncz@bnccon.com

Website: bnccon.com

Referred to below as “BNCcon”, the “Controller”, “we” or “us”.

2. Purpose of this Policy

BNCcon respects the privacy and data protection rights of visitors and persons who contact us.

This Policy explains what personal data we process, for what purposes, on what legal basis, how long we retain it, with whom it may be shared and what rights data subjects have.

Processing is governed in particular by Regulation (EU) 2016/679 (“GDPR”) and applicable Hungarian data-protection legislation.

3. Contact Requests and Business Enquiries

If you contact us through the website contact form, email or another communication channel, we may process information you provide, including:

• your name;
• email address;
• company or organisation, if supplied;
• the contents of your message;
• any other information you voluntarily provide.

The purpose is to respond to your enquiry, discuss potential services, establish a business relationship and, where applicable, take steps prior to entering into a contract.

The legal basis is:

• Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract;
• Article 6(1)(f) GDPR for other business enquiries, based on our legitimate interest in responding to communications, operating our business and developing professional relationships.

Where an enquiry does not lead to a business relationship, we generally retain the correspondence for no longer than 12 months following the last substantive communication, unless longer retention is justified by the establishment, exercise or defence of legal claims or another lawful purpose.

If the relationship results in a contract or invoicing, relevant information may be retained for the period required by applicable law. Accounting documentation may need to be retained for at least 8 years under Hungarian accounting rules.

4. Google Analytics

The website uses Google Analytics 4 (“GA4”) to understand how visitors use the website and to improve our services and communications.

Analytics may include information relating to:

• page views;
• sessions and visits;
• traffic sources;
• pages visited;
• general geographic and technical information;
• interactions with website elements;
• clicks on contact, email or LinkedIn links;
• successful contact-form submissions.

Google Analytics is used on the basis of your consent under Article 6(1)(a) GDPR.

Analytics storage is disabled by default and becomes enabled only where you consent to Analytics through the cookie consent mechanism.

You may withdraw your consent at any time through the “Cookie settings” link available in the website footer.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

BNCcon currently does not use Google Ads remarketing or personalised advertising through this website.

For users located in the EU, United Kingdom or Switzerland, Google Analytics does not log or store individual IP addresses. IP information may be used temporarily to derive coarse geographic information before being discarded.

5. Cookies and Browser Storage

Technologies that are strictly necessary for operation of the website may be used without consent where permitted by law.

Analytics cookies and similar technologies are activated only after prior consent.

Further details are available in our Cookie Policy.

6. Technical and Security Data

Website hosting and infrastructure providers may process limited technical information such as IP address, browser and device information, timestamps and security log data.

This processing is necessary for website operation, information security, troubleshooting, abuse prevention and system stability.

The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

7. Processors and Recipients

BNCcon may use third-party service providers in connection with operation of the website, including:

• website hosting and infrastructure providers;
• website development and operation providers;
• email and contact-form delivery providers;
• Google in connection with Google Analytics.

Such providers may access personal data only to the extent necessary to provide their services and must process data in accordance with applicable data-protection requirements.

We do not sell personal data.

8. International Data Transfers

Some technology service providers may process data outside the European Economic Area.

Where this occurs, BNCcon and/or the relevant provider relies on safeguards recognised under the GDPR, such as an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism, as applicable.

9. Retention

We retain personal data only for as long as necessary for the relevant processing purpose or as required by law.

Contact information is retained in accordance with the periods described above.

Retention of user-level and event-level Google Analytics data is governed by the data-retention settings configured within Google Analytics.

Aggregated statistics that no longer directly identify an individual may be retained for longer periods.

10. Your Rights

Subject to the conditions of the GDPR, you may have the right to:

• obtain information about processing of your personal data;
• request access to your personal data;
• request rectification of inaccurate data;
• request erasure;
• request restriction of processing;
• object to processing based on legitimate interests;
• exercise the right to data portability where applicable;
• withdraw consent at any time where processing is based on consent.

Requests may be sent to:

gabor.boncz@bnccon.com

We will respond within the time limits required by applicable data-protection law.

11. Complaints

If you believe that processing of your personal data infringes applicable data-protection law, you may lodge a complaint with the competent supervisory authority.

In Hungary:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

1055 Budapest, Falk Miksa utca 9–11.

Postal address: 1363 Budapest, P.O. Box 9.

You may also have the right to seek a judicial remedy.

12. Automated Decision-Making

We do not use personal data collected through this website for solely automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

13. Data Security

We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or unauthorised disclosure.

14. Changes to this Policy

We may update this Privacy Policy from time to time, particularly where our services, technologies or legal obligations change.

The current version will always be made available on the website.