Please be advised that the service provider DNC Fémforgácsoló Kft. (Headquarters: Hungary, 4087 Hajdúdorog, Kossuth utca 31, Company Registration Number: 09 09 029823) how and for what purposes it processes your personal data.

In our data processing activities, we comply with applicable laws—in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

This Privacy Policy applies to the following website: https://dncforg.hu

We reserve the right to amend this Notice at any time, and any such amendments will take effect upon publication.

Name of the Data Controller

• Name: DNC Fémforgácsoló Kft.
• Headquarters: Hungary, 4087 Hajdúdorog, 31 Kossuth Street.
• Email: dncforg@gmail.com
• Phone number: +36 70 340 6375

Legal Bases for Data Processing

1. Performance of the Contract (Article 6(1)(b) of the GDPR)
2. Compliance with Legal Obligations (Article 6(1)(c) of the GDPR)
3. The legitimate interests of the data controller or a third party (Article 6(1)(f) of the GDPR)
4. Consent of the data subject (Article 6(1)(a) of the GDPR)
5. Public interest or the exercise of public authority (Article 6(1)(e) of the GDPR)
6. Compliance with Accounting and Tax Obligations (for example, Article 6(1)(c) of the GDPR, pursuant to other applicable national laws)
7. Enforcement of rights, filing and defending claims (Article 6(1)(f) of the GDPR)

Data processed while using this site:

Hosting Provider Information

The data is processed and stored by the following hosting provider to ensure the service operates properly.

• Service Provider Name: Freemium, Ltd.
• Title: H-1132 Budapest, Victor Hugo Street 18–22, HU

Cookies

While browsing this website, so-called cookies may be stored on the user’s computer. These cookies contain technical information, and their primary purpose is to ensure a convenient, personalized browsing experience; however, the site may also use cookies necessary for analytics, remarketing, or media elements.

Essential cookies and services ensure that the site functions properly. Under the GDPR, these cookies and services do not require the user’s consent. These cookies and services are necessary for the website to function properly, but user consent is required for their use. Examples include, but are not limited to: payment providers, CAPTCHA services, and embedded booking interfaces. Statistical cookies and services collect usage information that allows us to gain insight into how our visitors interact with our website. Marketing services are used by third-party advertisers or publishers to display personalized ads. They do this by tracking visitors across various websites. These cookies and services are necessary for displaying certain media elements, such as embedded videos, maps, social media posts, etc. This category includes all cookies, domains, and services that do not fall into the specified categories or that have not been categorized.

Cookies Used on This Site

Users can control or disable cookies in their browser settings; however, this may affect certain features of the site.

Processing of Minors' Data

Our service is not specifically intended for minors under the age of 16. However, if we do collect and process data from minors, we do so only with the consent required by law or with the permission of a parent or guardian.

Parents and guardians may request at any time that data recorded about them or about minors under their care be amended or deleted.

Contact Forms

The forms on this website collect data voluntarily provided by users, which we use to contact them or to process their requests.

• email
• name
• tool
• IP address
• phone number
• browser

Data Retention Periods

We store data only for as long as necessary or until the time limits specified in the relevant laws have expired. After that, we delete or anonymize the data.

Transfer of Data to Third Parties

We will only disclose your data to third parties if you have expressly consented to such disclosure or if required to do so by law or by an official authority.

Data Security Measures

In the course of data processing, both the data controller and the data processor employ organizational and technical safeguards that take into account modern technological capabilities and the characteristics of data processing (purpose, scope, circumstances), and are tailored to the varying levels of risk to which natural persons are exposed. The purpose of these safeguards is to continuously maintain data protection in a manner proportionate to the risks.

These measures may include, for example, data encryption, maintaining the continuous availability, confidentiality, and integrity of systems and services, and ensuring the necessary resilience. We take special care to ensure that, should any physical or technical disruption occur, data availability and access can be restored as quickly as possible.

By regularly reviewing and testing our security measures, we ensure that the guarantees we provide are not merely theoretical but actually offer an adequate level of protection in practice. We store data in such a way that unauthorized persons cannot access it; to this end, paper-based documents are kept in a locked, secure environment, and access to electronically recorded information is restricted to individuals with appropriately regulated access rights.

We also ensure that data is deleted in a manner that allows for complete deletion upon the expiration of the specified retention periods or when deletion becomes necessary for other reasons, and that such deletion is irreversible. In the case of paper-based documents, destruction is carried out using specialized document shredding equipment or by engaging a specialized external partner. When electronic data storage media are decommissioned or discarded, we also ensure that the data is irretrievably removed.

Protection of Paper-Based Documents

We ensure physical protection for data stored in printed form, which includes secure and dry storage, as well as properly lockable rooms. Only authorized employees may access the relevant documents. If paper-based documents are digitized, the digital handling rules must be applied to them. Anyone involved in data processing may leave the work area only after ensuring that the materials entrusted to them are locked away and that unauthorized persons are prevented from accessing them.

The building and the rooms where the paper-based documents are stored are equipped with appropriate fire and property protection systems, thereby reducing the risk of physical damage.

IT Security

The computers and mobile devices used for data processing are equipped with appropriate antivirus protection and access controls. To ensure the security of digitally stored information, we use up-to-date backup and archiving solutions and ensure that these backups are accessible when needed.

Only authorized personnel may connect to the central server, in accordance with specified access levels. We protect the computers used for work and the data stored on them from unauthorized access using passwords and other access control measures.

Handling and Reporting Data Breaches

If an incident occurs that poses a risk of unauthorized access, damage, or loss to personal data, we will take immediate steps to further protect the affected data and mitigate any damage. If, based on the circumstances, it is likely that the incident poses a significant risk to the rights or freedoms of individuals, we will notify the affected individuals without undue delay and clearly explain the nature of the incident, as well as the measures we have taken or plan to take to remedy it.

Notification of the data subjects may be omitted if we have already implemented security measures (such as encryption) to prevent or mitigate harmful effects, which render the personal data unintelligible to unauthorized persons, or if the likelihood of the risk has been significantly reduced by taking additional measures. In certain cases, a public announcement may suffice in lieu of direct notification if individual notification would entail disproportionate difficulties.

In accordance with applicable regulations, if a data breach occurs that is likely to pose a risk to the rights and freedoms of natural persons, the data controller must report it to the competent supervisory authority as soon as it becomes aware of the incident, but no later than 72 hours thereafter. If the report is submitted after this period, the reason for the delay must also be included in the report.

User Rights

As a data subject (user), you have the following rights regarding the processing of your personal data:

• Access to Your Personal Data (Article 15 of the GDPR)
  You can find out whether we store information about you and, if so, what specific details we have; you may also request information regarding the purpose, legal basis, and other relevant circumstances of the data processing.
• Request for Correction (Article 16 of the GDPR)
  You have the right to request that inaccurate or incomplete data be corrected or supplemented.
• Deletion (“right to be forgotten”) (Article 17 of the GDPR)
  If the data is no longer needed, or if the legal conditions for erasure are met, you may request that we erase it as soon as possible.
• Ordering a Restriction (Article 18 of the GDPR)
  In certain cases, you may request that we simply store the data and temporarily refrain from using it in any other way (for example, if you dispute the accuracy of the data but do not wish to have it deleted immediately).
• Data Portability (Article 20 of the GDPR)
  You have the right to receive the data we have recorded about you in a machine-readable format, or to request that we transfer this data to another service provider, if technically feasible.
• The Right to Protest (Article 21 of the GDPR)
  You may object to the further processing of your personal data if you believe that our legitimate interests (or another legal basis) do not sufficiently justify the processing.

To exercise the rights listed above, please contact us (email: dncforg@gmail.com). We will endeavor to respond to your requests as quickly as possible. We generally respond within one month of receiving your request, but if necessary—for example, if the request is complex—this period may be extended by an additional two months. We will provide information regarding the reasons for the extension within that same one-month period.

If we are unable to comply with your request, we will also notify you of this and the reason within the aforementioned deadline. In this case, you have the option to file a complaint with the supervisory authority or seek judicial remedy.

Complaint Handling, Legal Remedies

If you believe that your personal data has been misused, you may file an official report using the following contact information:

• Email: dncforg@gmail.com
• By mail: Hungary, 4087 Hajdúdorog, 31 Kossuth Street.

We will thoroughly investigate any complaints we receive and inform you of the results of the investigation and the measures taken. If there is no specific timeframe prescribed by law for handling complaints, we will review at least once every three years the extent to which the investigation of complaints and our procedures comply with the purpose of data processing and applicable laws.

In addition, you have the right to file a complaint with the competent data protection authority:

• Name of the authority: National Authority for Data Protection and Freedom of Information
• Title: 1055 Budapest, 9–11 Falk Miksa Street.
• Phone: +36-1-391-1400
• Email: ugyfelszolgalat@naih.hu

Date of the most recent update: June 3, 2026.