Privacy Notice

Effective from 20 October 2026

This notice explains how we process personal data when you use our website (call-back form, operation of the website, external links). Data processing in our practice - during examinations and hearing aid care - is covered by a separate notice available at the practice.

1. Data controller

OtoFit Korlátolt Felelősségű Társaság (OtoFit Kft.)
Registered office: 9024 Győr, Babits Mihály utca 12. B. ép.
Company reg. no.: Cg. 08-09-028558 · Tax no.: 25792346-2-08
Shop: ÉRTED Hallásgondozó és Hallókészülék Szaküzlet, 9021 Győr, Bajcsy-Zsilinszky út 5. fsz.
Phone: +36 96 800 911 · Email: info@hallasgondozo.hu

For data protection questions, please contact us at the email address or phone number above.

2. Call-back form

• Data: name, phone number, comment (optional).
• Purpose: calling you back, arranging an appointment, answering your question.
• Legal basis: your consent (GDPR Art. 6(1)(a)), given by ticking the checkbox when submitting the form. You may withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal.
• Retention: as long as needed to call you back and handle your enquiry, or until you withdraw your consent; after that we delete it.
• Providing data is voluntary, but without a name and phone number we cannot call you back.

Please do not enter health data in the comment field (e.g. a diagnosis or detailed symptoms). We discuss these during the personal examination.

3. Operation of the website (hosting, logs)

When you open the website, the hosting provider's system automatically records the technical data needed for operation: IP address, time of the request, address of the page, browser and device type. We process this data to keep the website secure and to detect errors and abuse, based on our legitimate interest (GDPR Art. 6(1)(f)). The hosting provider's system keeps logs for as long as technically necessary and then deletes them automatically. We do not use this data to identify visitors or to build profiles.

Some images on the website (e.g. blog images) are loaded by your browser from the storage of our content management system; in this case your IP address and browser data also reach this provider (see section 5).

4. Cookies and browser storage

The website does not use tracking, analytics or advertising cookies. We measure traffic with cookie-free, aggregated statistics (Vercel Web Analytics): the page visited, the referring page, the country, and the browser, operating system and device type are recorded. Visitors are not identified: IP addresses are not stored, visits within one day are linked only by an irreversible identifier that is renewed daily, and the statistics are available only in aggregate. The purpose is to improve the website; the legal basis is our legitimate interest (GDPR Art. 6(1)(f)). For convenience features we use your browser's own storage; it contains no personal data and is never sent to us:

• erted-promo-seen (until the session ends) - the offer window appears only once per visit.
• erted-splash-seen (until the session ends) - the intro animation appears only once.
• erted-lang-suggest (until deleted) - if you dismissed the language suggestion, we do not ask again.

You can delete these in your browser settings at any time. Staff who edit the website content receive a technical cookie for editing; this does not affect visitors.

5. Processors and recipients

We process data with the help of the following providers, acting on our behalf:

• Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA) - website hosting and the traffic statistics described in section 4; the log data described in section 3, and the submitted form data pass through its systems. Data may be transferred to the United States; the transfer is based on the standard contractual clauses adopted by the European Commission (GDPR Art. 46).
• Supabase Inc. (supabase.com) - content management system and image storage of the website; data is stored in the European Union (Frankfurt). It processes the visitor's IP address and browser data when images are loaded.
• SimplyForms (operator: Adam Todt, Czech Republic, simplyforms.app) - receiving the form data and forwarding it to us by email. Its servers are in the European Union (Germany). It processes technical data of the submission (IP address, browser, referring page) under its own privacy rules.
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Gmail) - email service: receiving and storing messages from the form. Data may be transferred to the United States; the transfer is based on the EU-US Data Privacy Framework, under which Google is certified.
• The website's developer and maintainer (Lehel Bognár) - may access the hosting log data while operating and troubleshooting the website.

We do not pass data to other third parties, do not sell it and do not use it for advertising.

6. External services and links

Online booking takes place in the Medicall (MyMedio) booking system (Medio MedTech Zrt.). Data entered when booking is processed by the operator of the booking system and by our practice; the notice available on the booking page provides details. Our website only links to the booking page and transfers no data to it.

The website contains links to Facebook, Instagram and Google Maps (no embedded content). When you open them, the respective provider's own privacy rules apply.

7. Your rights

Regarding the processing of your data, you have the right to:

• request information and access your data (GDPR Art. 15),
• request correction of your data (Art. 16),
• request erasure of your data (Art. 17),
• request restriction of processing (Art. 18),
• receive your data in a machine-readable format or have it transmitted (data portability, Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw your consent at any time (Art. 7(3)).

You can send your request to info@hallasgondozo.hu or call +36 96 800 911; we reply within one month at the latest. No automated decision-making or profiling takes place.

8. Remedies

If you feel that our processing infringes your rights, please contact us first - we will try to resolve it quickly. You may also lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
H-1055 Budapest, Falk Miksa utca 9-11. · Postal address: H-1363 Budapest, Pf. 9.
Phone: +36 1 391 1400 · Email: ugyfelszolgalat@naih.hu · naih.hu

You may also go to court; at your choice, proceedings may be brought before the regional court (törvényszék) of your place of residence or stay. If you live in another EU country, you may also contact the data protection authority there.

9. Data security, changes

The website is only available over an encrypted (HTTPS) connection, and only authorised staff and processors have access to the data. We update this notice when the website or the law changes; the current version is always available on this page with its effective date.

This is a translation. The Hungarian version of this privacy notice is legally binding.