Privacy Notice

Privacy Notice for Visitors and Users of the Spányi Partners Zrt. Website

The Purpose of the Privacy Notice

This Privacy Notice governs the processing of personal data by Spányi Partners Zrt. (hereinafter: “Data Controller”). This notice remains in effect until revoked; any amendments thereto shall take effect upon publication on the website accessible under the domain names spanyipartners.hu, spanyi.hu, and spajak.hu (hereinafter: “Website”). This Privacy Policy may be amended at any time by unilateral decision, and such amendments shall take effect upon publication.

By beginning to use the Website and by utilizing the Data Controller’s services, visitors to the Website and users of the Data Controller’s services (hereinafter: “User”) accept all terms and conditions set forth in this Privacy Policy (hereinafter: Notice); therefore, please read this Notice carefully before using the Website or the service.

On our website, we collect and process only those data that are necessary and essential for the purposes specified in this Privacy Policy. Visiting the Website and using the services offered there are voluntary, so the User’s data is also provided to the Data Controller on a voluntary basis.

1.) The Data Controller’s Information and Contact Details

The data controller is Spányi Partners Zrt.

  • Headquarters: 1123 Budapest, Győri út 16-18, 1st floor
  • Company Registration Number: 01-10-048398
  • Tax ID: 25180549-2-43
  • International Tax ID Number: HU25180549
  • Email address: info@spanyipartners.hu
  • Phone number: +36 30 500 0165
  • Website: www.spanyi.hu

2.) Scope of the data processed

2.1. Contact Us

On the Website, in the designated section, the User has the opportunity to provide their personal data in order to contact the Data Controller and receive information regarding the Data Controller’s services. When contacting us, you must provide the following personal data (fields marked with an asterisk are required):

  • Name;
  • Company;
  • Email address*;
  • Message.

Only individuals who are at least 18 years of age are eligible to provide data.

2.3. Career

The Data Controller maintains a separate “Careers” subpage on the Website, through which it posts its current job openings. Users may submit job applications through this platform. Access to this data is limited to the Data Controller’s HR staff and the manager of the department for which the position is being filled. When contacting us, you must provide the following personal data (fields marked with an asterisk are required):

  • Name;
  • Email address*;
  • Upload your resume.

2.4. Subscribe to the Newsletter

On the Website, Users have the option to subscribe to a newsletter. To subscribe to the newsletter, you must provide the following personal information (fields marked with * are required):

  • Email address*;

The User may unsubscribe from the newsletter at any time, without providing a reason, by clicking the unsubscribe link included in the newsletter.

Only individuals who are at least 18 years of age are eligible to provide data.

3.) Cookies

3.1. The Purpose of Cookies

  • They collect information about visitors and their devices;
  • They save visitors’ individual settings;
  • They make the website easier to use;
  • They provide a high-quality user experience.

To provide a personalized service, the User’s computer is sent a small data packet, known as a cookie, which is read during subsequent visits. If the browser returns a previously saved cookie, the service provider managing the cookie can link the User’s current visit to previous ones, but only with respect to its own content.

3.2. Strictly necessary, session cookies

The purpose of these cookies is to enable visitors to browse the Spányi Partners Zrt. website fully and seamlessly, and to use its features and the services available there. These types of cookies remain active until the end of the session (browsing session); when you close your browser, these cookies are automatically deleted from your computer or other device used for browsing.

3.3. Third-Party Cookies (Analytics)

Spányi Partners Zrt. also uses third-party cookies from Google Analytics on its website. By using Google Analytics, a service designed for statistical purposes, the Data Controller collects information about how visitors use the website. This data is used to improve the website and enhance the user experience. These cookies remain on the visitor’s computer or other device used for browsing, in the browser, until they expire or until the visitor deletes them.

4.) Purpose and Duration of Data Processing

The purpose of data processing is to establish and maintain contact with Users interested in the services provided by the Data Controller, to provide information to Users, and to handle comments regarding the Data Controller’s activities.

The Data Controller processes personal data for as long as the purpose of the data processing remains valid, thus, in the event of contact, from the time the request is received by the Data Controller until the User requests the deletion of their data or withdraws their consent to the processing of their personal data.

Personal data will be deleted immediately upon the cessation of the purpose of data processing or upon the User’s request.

5.) Legal Basis for the Processing of Personal Data

By contacting us, the User consents to the Data Controller processing the User’s personal data as described in this Notice. The processing of personal data is based on the User’s voluntary consent given in full knowledge of this Notice (GDPR Article 6(1)(a)).

Data processing activities carried out by Spányi Partners Zrt. are based on voluntary consent or statutory authorization. In cases where data processing is based on voluntary consent, data subjects may withdraw their consent at any stage of the data processing.

In certain cases, laws require the processing, storage, and transmission of a specific set of data.

We would like to remind data providers to Spányi Partners Zrt. that if they are not providing their own personal data, they are required to obtain the consent of the data subject.

Our data processing principles are in accordance with applicable data protection laws, in particular the following:

  • 2011. Act CXII of — on the Right to Informational Self-Determination and Freedom of Information (Infotv.);
  • Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 – on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR);
  • 2013. Act V of — on the Civil Code (Ptk.); Act C of 2000 on Accounting (Accounting Act);
  • 2017. Act LIII of — on the Prevention and Combating of Money Laundering and the Financing of Terrorism (Pmt.);
  • 2013. Act CCXXXVII of — on Credit Institutions and Financial Enterprises (Hpt.).

6.) Persons Entitled to Access Personal Data, Data Processing

The Data Controller and the Data Processors it engages are authorized to access personal data in accordance with applicable laws.

Data processing is carried out by , the following data processor acting on behalf of the Data Controller:

Spányi Partners, Ltd.

Headquarters: 1123 Budapest, Győri út 16-18

Purpose of data processing: Provision of IT and server services

The Data Controller reserves the right to involve additional data processors in data processing in the future, in which case it will notify Users by amending this Privacy Notice.

In the absence of an express statutory provision, the Data Controller will disclose data capable of identifying a specific User to third parties only with that User’s express consent.

7.) User Rights

7.1. Right of Access

The data subject has the right to receive confirmation from the data controller as to whether his or her personal data are being processed, and if such processing is taking place, the data subject has the right to access the personal data and the following information:

  • Purposes of data processing;
  • Categories of personal data concerned;
  • The recipients or categories of recipients to whom the personal data have been or will be disclosed, including, in particular, recipients in third countries and international organizations; the planned duration of the storage of the personal data;
  • The right to rectification, erasure, or restriction of processing, and the right to object;
  • The right to file a complaint with the supervisory authority; information regarding data sources;
  • The fact that automated decision-making is taking place, including profiling, as well as the logic applied and clear information regarding the significance of such data processing and the likely consequences for the data subject.

The data controller shall provide the information within one month of the submission of the request.

7.2. Right to Rectification of Processed Data

The User may request that the Data Controller (using the contact information specified in Section 1) correct any inaccurate personal data or supplement any incomplete data, taking into account the purpose of the data processing. The Data Controller shall make the correction without undue delay.

7.3. Right to Erasure

The User may request that the Data Controller erase personal data concerning him or her without undue delay, and the Data Controller is obligated to erase personal data concerning the data subject without undue delay if any of the following grounds apply:

  • The personal data is no longer necessary for the purpose for which it was collected or otherwise processed;
  • The User withdraws his or her consent, and there is no other legal basis for the data processing;
  • The processing of personal data was unlawful;
  • Personal data must be erased to comply with a legal obligation under Union or Member State law to which the data controller is subject;
  • The collection of personal data based on consent took place in connection with the provision of information society services to children.

A request to erase data cannot be made if the processing of the data is necessary:

  • For the purpose of exercising the freedom of expression and the right to information;
  • To comply with a legal obligation under Union or Member State law governing the processing of personal data and applicable to the data controller, or to perform a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  • Relating to the field of public health, or for archival, scientific, and historical research purposes, or for statistical purposes, in the public interest;
  • Or to assert, enforce, or defend legal claims.

7.4. Restriction of Data Processing

The User has the right to request that the Data Controller restrict the processing of personal data, rather than rectifying or erasing such data, if any of the following conditions are met:

  • If the User disputes the accuracy of the personal data, the restriction applies for a period that allows the data controller to verify the accuracy of the personal data;
  • The data processing is unlawful, and the User objects to the erasure of the data and instead requests that its use be restricted;
  • The Data Controller no longer needs the personal data for the purposes of data processing, but the User requires it to assert, enforce, or defend legal claims.

7.5. Action Taken by the Data Controller in Response to a User’s Request

The Data Controller shall inform the User without undue delay, but no later than one month from the receipt of the request, of the measures taken in response to the request for access, rectification, erasure, restriction, objection, and data portability. If necessary, taking into account the complexity of the request and the number of requests, this deadline may be extended by an additional two months. The Data Controller shall notify the User of any extension of the deadline within one month of receiving the request, specifying the reasons for the delay.

If the User submitted the request electronically, the information must be provided electronically whenever possible, unless the data subject requests otherwise.

If the Data Controller does not take action in response to the User’s request without delay, but no later than one month from the date of receipt of the request, inform the User of the reasons for failing to take action, as well as of the User’s right to file a complaint with a supervisory authority and to seek judicial remedy.

Upon the User’s request, the information, the notification, and the action taken in response to the request must be provided free of charge. If the User’s request is clearly unfounded or—particularly due to its repetitive nature—excessive, the Data Controller, taking into account the administrative costs associated with providing the requested information or guidance or taking the requested action, may charge a reasonable fee or refuse to take action based on the request. The burden of proving that the request is manifestly unfounded or excessive rests with the Data Controller.

8.) Links

The Data Controller assumes no responsibility for the content or data and information protection practices of external websites accessible via links on the Website. If the Data Controller becomes aware that a linked site or link infringes the rights of third parties or violates applicable laws, it will immediately remove the link from the Website.

9.) Data Security

The Data Controller undertakes to ensure the security of the data and to implement the technical and organizational measures and establish the procedural rules necessary to ensure that the data collected, stored, and processed are protected, and to prevent their destruction, unauthorized use, and unauthorized alteration. It also undertakes to require any third parties to whom it transfers or discloses data based on Users’ consent to comply with data security requirements.

The Data Controller shall ensure that unauthorized persons cannot access, disclose, or transfer the processed data, nor modify or delete it. The processed data may be accessed only by the Data Controller, its employees, and the Data Processor engaged by the Data Controller; the Data Controller shall not disclose such data to any third party who is not authorized to access it.

The Data Controller will do everything in its power to ensure that data is not accidentally damaged or destroyed. The Data Controller requires its employees involved in data processing activities to comply with this commitment.

The User acknowledges and agrees that when providing personal data on the Website, – even though the Data Controller employs state-of-the-art security measures to prevent unauthorized access to or disclosure of such data – the protection of such data cannot be fully guaranteed on the Internet. In the event of unauthorized access or disclosure of data despite our best efforts, the Data Controller shall not be liable for such data acquisition or unauthorized access, nor for any damages incurred by the User as a result thereof. Furthermore, the User may also disclose their personal data to third parties, who may use it for unlawful purposes or in an unlawful manner.

10.) Options for Enforcing Rights

The Data Controller makes every effort to ensure that personal data is processed in accordance with the law; however, if the User feels that this has not been the case, they may send an email to info@spanyipartners.hu.

If the User feels that his or her right to the protection of personal data has been violated, he or she may seek legal remedy with the competent authorities in accordance with applicable laws:

  • At the National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C)
  • In court.

The court will hear the case on an expedited basis. The Budapest Metropolitan Court has jurisdiction over the case, but the case may also be brought before the court with jurisdiction over the plaintiff’s place of residence or place of stay, at the plaintiff’s discretion.

11.) Copyright Notice

The entire content of this website is protected by copyright under Act LXXVI of 1999 on Copyright. It is prohibited to copy, transmit, or distribute the content of this website, in whole or in part, without prior written permission. The publication or adaptation of content found on this website is permitted only with the prior written permission of the operator and provided that the source is cited. Visitors may download, display on their screens, or print the website’s content, but may not reproduce it. Users may use the website’s content, or parts thereof, exclusively for their own personal purposes. Copying for the purpose of distribution requires the written consent of the website operator. Unauthorized use may result in criminal and civil liability. The website operator may claim damages or compensation for injury.

12.) Other Provisions

This Privacy Notice is governed by Hungarian law, in particular Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information, as well as Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (April 27, 2016) shall apply.

Budapest, October 15, 2025

Spányi Partners Zrt.
Data Controller