Privacy Policy
noxtechai.com website and related services
1. Details of the data controller
Controller
Registered seat
Company registration no.
Tax number
Website
Data protection contact
Phone
This notice explains, in plain terms, what personal data we process when you use our website, request a quote, get in touch with us, or work with us as a client. Processing is governed by Regulation (EU) 2016/679 (the GDPR), Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (the "Infotv."), and other applicable legislation.
2. The processing activities we carry out
Purpose
Data processed
Legal basis
Retention
Recipients, processors
Purpose
Data processed
Legal basis
Retention
Recipients, processors
Purpose
Data processed
Legal basis
Retention
Recipients, processors
Purpose
Data processed
Legal basis
Retention
Recipients, processors
Purpose
Data processed
Legal basis
Retention
Recipients, processors
As a general rule, providing your data is voluntary. However, if you do not provide the data needed for a quote request or for getting in touch with us, we will not be able to respond to your enquiry.
3. Chatbot
The chatbot running on our website is powered by artificial intelligence; its replies are not written by a human. We process the content of your messages in order to respond to you and to ensure the quality and security of the service (legal basis: GDPR Art. 6(1)(f) or (b)). We retain conversations for X days. The chatbot does not make any decision based solely on automated processing that would produce legal effects concerning you. Please do not share special categories of data (for example health data) or passwords during the conversation. At your request, you can ask our team for a callback or to get in touch with you directly at any time.
4. Processors and recipients
We use data-processor service providers to help us handle data (for example hosting, e-mail, CRM, newsletter, invoicing and analytics providers), with whom we have entered into data processing agreements. If one of our providers also processes data outside the European Economic Area (EEA) (for example in the United States), the legal basis for that transfer is an adequacy decision (for example the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses (SCCs). We will provide information about the specific recipients and the safeguards that apply to them on request.
5. Data security
We protect your data with appropriate technical and organisational measures: multi-factor authentication, encrypted transmission and storage, access control, and regular backups. Our staff are bound by confidentiality and receive regular training. In the event of a personal data breach, we notify the supervisory authority within the statutory deadline and, where necessary, the affected individuals as well.
6. Your rights
Under the GDPR, you have the rights listed below. You can submit your request using the contact details given above. We respond within one month; in complex cases this may be extended by a further two months, where justified.
- Right of access (Article 15): you can ask whether we process your data and request a copy of it.
- Right to rectification (Article 16): you can request the correction of inaccurate data.
- Right to erasure (Article 17): in certain cases you can request the deletion of your data (the "right to be forgotten").
- Right to restriction of processing (Article 18): you can request that processing be restricted.
- Right to data portability (Article 20): you can request the data you provided under consent or a contract, in a machine-readable format.
- Right to object (Article 21): you can object at any time to processing based on legitimate interest, and to direct marketing.
- Right to withdraw consent (Article 7(3)): withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
7. Remedies
If you feel that the processing of your data infringes your rights, please contact us first so we can try to resolve the matter together. You may also lodge a complaint with the supervisory authority:
Authority
Address
Postal address
Phone
Website
You may also bring proceedings before a court. Jurisdiction lies with the regional court (törvényszék), and the action may be brought before the regional court of your place of residence or habitual residence, at your choice.
8. Automated decision-making, profiling
We do not carry out any decision-making based solely on automated processing, including profiling, that would produce legal effects concerning you or would similarly significantly affect you.
9. If we did not obtain your data from you
If we do not obtain your data directly from you (for example, as the contact details of a representative provided by your company, or from a public company register), we will inform you about the source of the data and the details of the processing, in line with Article 14 of the GDPR, at the time of first contact and at the latest within one month.
10. Cookie notice
The website does not currently use cookies for measuring traffic, marketing, or tracking purposes, and there is no cookie-settings window on the site.
To keep a conversation going, the chatbot uses your browser's session storage (sessionStorage); this is not a cookie, does not track you, does not share data with other websites, and is cleared automatically when you close the browser tab.
If we introduce cookies in the future (for example, to measure traffic), we will update this notice and, where required by law, ask for your consent first.
11. Changes to this notice
We may amend this notice as necessary; the current version is always available on the website. Effective from: date.