1. Data controller details
The data controller:
- Name: HIDRA-MIX Kft. (HIDRA-MIX Készülékgyártó, Javító és Kereskedelmi Kft.)
- Registered address: 1106 Budapest, Jászberényi út 24-36.
- Company registration number: 01-09-162919
- Tax number: 10681824-2-42
- Representative: Gyula Mitterer (Managing Director)
- Email: [email protected]
- Phone: +36 30 255 4310 (mobile) · +36 1 261 9295 (office)
2. Personal data processed
On the cupal.hu website we process the following personal data:
When filling in the quote request form:
- Name (required)
- Email address (required)
- Phone number (optional)
- Company name (optional)
- Product information (product type, dimensions, quantity)
- Time of form submission
When using the chat:
- Email address (if provided by the user)
- Content of messages
- Chat session identifier (session ID)
- Page on which the chat was used
Automatically collected data (only with consent):
- Google Analytics 4 anonymised usage statistics (pages visited, session duration, language setting, device type)
- IP address (automatically anonymised by Google Analytics, truncated before storage)
- Form interactions and conversion events (quote request submissions)
- Referring page (referrer), landing page
We only collect this data if you explicitly consent in the cookie banner. If you decline, Google Analytics will not set a cookie — only anonymous, modelled measurements are sent (Google Consent Mode v2 — Advanced).
3. Purposes of data processing
- Processing quote requests and orders
- Communicating with enquirers and customers
- Providing technical advice
- Improving our services
4. Legal basis for data processing
- Processing quote requests: Based on GDPR Article 6(1)(b) (performance of a contract, or steps prior to entering a contract at the request of the data subject).
- B2B communication: Based on GDPR Article 6(1)(f) (legitimate interest). The controller's legitimate interest is maintaining business communication.
- Marketing purposes: If data were used for marketing, only with the data subject's prior, voluntary consent (GDPR Article 6(1)(a)).
5. Data retention periods
- Quote requests and business correspondence: for the duration of the business relationship, then for 5 years after its termination (as required by accounting legislation).
- Chat messages: 1 year after the conversation closes, or sooner upon the data subject's deletion request.
- Data is irreversibly deleted after the retention period expires.
6. Data transfers
Messages and quote requests received from customers are forwarded via the Discord messaging system for internal processing. Discord Inc. stores data outside the European Economic Area (EEA) but provides adequate safeguards (Standard Contractual Clauses).
We do not share personal data with third parties for marketing purposes.
The data controller does not carry out automated decision-making or profiling of data subjects.
7. Data subject rights
Under the GDPR, data subjects have the following rights:
- Right of access (Article 15): The right to receive confirmation as to whether personal data is being processed.
- Right to rectification (Article 16): The right to request correction of inaccurate data.
- Right to erasure (Article 17): The right to request erasure of personal data where there is no further legal basis for processing.
- Right to data portability (Article 20): The right to receive data in a structured, commonly used format.
- Right to object (Article 21): The right to object to processing based on legitimate interest.
To exercise your rights, please contact us at [email protected].
If you believe your data is being processed unlawfully, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
- Name: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
- Address: 1055 Budapest, Falk Miksa utca 9-11.
- Website: www.naih.hu
8. Cookies
Essential (always active)
cupal_consent— stores your cookie consent decision (6 months)- Session identifiers and language settings
Analytical — Google Analytics 4 (only with consent)
_ga— unique visitor identifier (2 years)_ga_<property>— session state (2 years)
We use Google Analytics 4 in Google Consent Mode v2 Advanced mode: by default, all analytical and advertising signals are disabled. If you decline or do not choose, no analytical cookie is set; Google receives only anonymous, device-identifier-free, modelled measurements. Upon acceptance, the full measurement package is activated.
Data retention in GA4 is limited to 2 months, Google signals (cross-device data processing) are disabled, and EU data storage is enabled.
You can withdraw consent at any time by clearing browser cookies, or write to us at [email protected].
Google Inc. privacy policy: policies.google.com/privacy
9. Contact for data protection matters
For data protection questions, requests and the exercise of your rights, please contact us at:
- Email: [email protected]
- Postal address: HIDRA-MIX Kft., 1106 Budapest, Jászberényi út 24-36.
We will respond to your request within 30 days.