Privacy Policy
1. Data Controller
The Data Controller is responsible for processing the personal data provided through the contact form available on the website.
Data Controller: Rope&Drone
Registered office: [Cím]
Email: [Email address]
Phone: [Phone number]
Tax number: [Tax number]
The purpose of this Privacy Notice is to explain how the Data Controller processes personal data provided when completing the contact form available on the website.
2. Purpose of Data Processing
The purpose of the contact form available on the website is to enable interested parties to contact the Data Controller.
After the form is submitted, the provided data is transmitted electronically by email to the Data Controller. The Data Controller uses the data to contact the interested party, understand the details of the inquiry, and provide information, a quotation, or another response based on the information provided.
The data will not be used for purposes other than those specified in this Privacy Notice.
3. Categories of Personal Data Processed
The contact form may request the following information:
name;
company name;
telephone number;
email address;
requested service;
project location;
the message provided by the interested party and any other information contained therein.
Please do not provide personal or special-category data in the message field that is not necessary for contacting the Data Controller.
4. Legal Basis for Data Processing
The legal basis for processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), where the processing is necessary for taking steps at the request of the data subject prior to entering into a contract.
Where the inquiry is not related to steps preceding the conclusion of a contract, the legal basis for processing may be the legitimate interest under Article 6(1)(f) of the GDPR, namely the Data Controller’s legitimate interest in responding to incoming inquiries and maintaining contact with interested parties.
5. Data Retention Period
The Data Controller processes the personal data necessary for contacting the interested party for the purpose of handling the inquiry and subsequent communication.
As a general rule, the data will be retained for a maximum of 3 years following the conclusion of the contact process, unless:
a contractual relationship is established between the data subject and the Data Controller;
a longer retention period is required by law;
further retention of the data is necessary for the establishment, exercise, or defence of legal claims.
The actual retention period shall be determined in accordance with the Data Controller’s data processing practices.
6. Recipients of the Data and Data Processors
The data provided through the contact form is primarily transmitted to the Data Controller.
The Data Controller may use external service providers for the technical operation of the form and for the transmission of data by email. Such providers may process the data on behalf of and according to the instructions of the Data Controller, solely to the extent necessary for providing their services.
The service providers used are:
Web hosting provider: Magyar Hosting
Email provider: info@mhosting.hu
Form / website technical service provider: Ninja Forms
The Data Controller does not sell the data to third parties.
7. Email Notifications
When the contact form is submitted, the provided data is transmitted by email to the email address specified by the Data Controller.
The Data Controller, as well as technical service providers involved in operating the email system, may have access to the data transmitted by email to the extent necessary to perform their respective tasks.
8. Data Security
The Data Controller applies appropriate technical and organisational measures to protect personal data against, among other things, unauthorised access, alteration, disclosure, loss, or destruction.
During data processing, the Data Controller strives to process only the data necessary for contacting the interested party and handling customer inquiries.
9. Rights of Data Subjects
The data subject has the right to:
- request information about the processing of their personal data;
- request access to their personal data being processed;
- request the rectification of their personal data;
- in certain cases, request the erasure of their personal data;
- in certain cases, request the restriction of processing;
- in certain cases, object to the processing of their personal data;
- where provided for by applicable law, request data portability.
The data subject may submit a request using the contact details of the Data Controller provided above.
The Data Controller is entitled to appropriately verify the identity of the data subject before fulfilling the request.
10. Legal Remedies
If the data subject believes that the processing of their personal data violates applicable data protection legislation, they may first contact the Data Controller.
The data subject is also entitled to lodge a complaint with the supervisory authority.
The competent supervisory authority in Hungary is:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Email: ugyfelszolgalat@naih.hu
The data subject is also entitled to bring proceedings before a court in accordance with applicable legislation.
11. Provision of Data
Completion of the contact form is voluntary. The interested party provides the personal data necessary for contacting the Data Controller at their own discretion.
Failure to provide the data may result in the Data Controller being unable to contact the interested party or adequately respond to the inquiry.
12. Amendments to this Privacy Notice
The Data Controller reserves the right to amend this Privacy Notice, particularly in the event of changes to the applicable legal framework, the operation of the website, or the data processing practices applied.
The current version of the Privacy Notice is available on the website.
Last updated: August 9, 2026