This translation is provided for information. In the event of any discrepancy, the Hungarian version shall prevail.
Privacy Notice
Effective: from 5 August 2026 until withdrawn.
This notice explains processing connected with the B2B Portal at munkavedelemextra.hu and b2b.munkavedelemextra.hu under Regulation (EU) 2016/679 (GDPR).
1. Controller
- Company: Tilonasec Kereskedelmi és Szolgáltató Kft.
- Registered office: 6722 Szeged, Honvéd tér 2., Hungary
- Company registration number: 06-09-030671
- Tax number: 32876327-2-06
- Email: [email protected]
- Phone: +36 62 421 257
The Controller is not required to appoint a data protection officer and accepts privacy enquiries through these contacts.
2. Data, purposes, legal bases and retention
| Processing | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Registration request | Company and tax data, contact name, email, phone and message | Preparing the partner contract, GDPR 6(1)(b); legitimate interest in business contact, 6(1)(f) | Two years after last contact if rejected or unanswered; otherwise as part of the partner relationship |
| Partner account | Contact details, encrypted password, company data and last login | Performance of the partner contract and Portal service, 6(1)(b) | Until the partner relationship ends |
| Orders and invoicing | Items, amounts, company and tax data, delivery address and contact details | Contract performance, 6(1)(b), and statutory accounting obligation, 6(1)(c) | Accounting records for eight years |
| Server logs | IP address, request time and request data | Secure operation and abuse prevention, legitimate interest, 6(1)(f) | Up to 90 days |
| Cookies | Session identifier and CSRF security cookie | Technically necessary service, 6(1)(b) and (f) | Until the session ends |
The public homepage does not set cookies and the Portal uses no marketing or analytics cookies. Google reCAPTCHA v3 may protect registration; Google Ireland Ltd. may process device data under its own privacy notice.
3. Recipients and processors
- Hosting: Hostinger International Ltd., Larnaca, Cyprus; server in the EU.
- Content delivery and protection: Cloudflare, Inc., USA; transfers rely on the EU–US Data Privacy Framework.
- Accounting: the Controller’s accountant accesses accounting documents to fulfil statutory duties.
Personal data is not sold or disclosed to third parties for sales or marketing.
4. Data subject rights
You may request access and a copy, rectification, erasure or restriction where the statutory conditions apply, data portability, and may object to processing based on legitimate interest. The Controller responds without undue delay and within one month at the latest.
5. Remedies
You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9–11.; +36 1 391 1400; [email protected]; naih.hu. You may also bring proceedings before the competent regional court, including the court of your residence.
6. Security
The Portal uses HTTPS, passwords are stored in non-reversible form, and only authorised staff may access personal data. Technical and organisational safeguards are proportionate to the risks.
7. Amendments
The Controller may amend this notice; the current version is always available on the Portal.