Periszkóp Média- és Piackutató Kft.

Version: 1.0

Effective date: March 1, 2026

1. Data Controller's Details and Contact Information

Name: PERISZKÓP Média- és Piackutató Korlátolt Felelősségű Társaság

Registered office: 1221 Budapest, Tokaji utca 10, Hungary

Company registration number: 01 09 672014

Tax number: 12376478-2-43

Represented by: Márta Ilona Schermann (Managing Director)

Email: periszkop@periszkop.hu

Phone: +36 30 855 6001

Website: https://www.periszkop.hu

2. Purpose of This Notice, Legal Bases, and Definitions

• Purpose: to transparently present the personal data we process, the purposes and legal bases for processing, retention periods, recipients, and data subjects' rights.
• Governing law: GDPR (EU) 2016/679; Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information; Act C of 2000 on Accounting; Act CXXVII of 2007 on VAT; the Hungarian Civil Code.
• Definitions: as set out in Article 4 of the GDPR.

3. Processing Activities

3.1. Contracting and Performance (B2C/B2B)

Purpose: creating, recording, and performing contracts; handling warranty, guarantee, and other claims; invoicing.

Data subjects: individual customers/sole traders; contact persons at corporate partners.

Data categories: for individuals/sole traders — name, address, place/date of birth, mother's name; signature (for written contracts); sole trader registration number; billing/delivery details; contact information; order, payment, performance, and warranty/guarantee data; proof of performance/timesheets. For contact persons — name, position, company, email, phone.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)); legal obligation — accounting/VAT (GDPR Art. 6(1)(c)); for contact persons, legitimate interest (GDPR Art. 6(1)(f)).

Retention: for the duration of the contract and any applicable limitation period for claims (generally 5 years); accounting records: 8 years (Section 169 of the Accounting Act).

3.2. Customer Service and Communication (email/phone/mail, contact form)

Purpose: recording and responding to inquiries, with traceability where needed.

Data subjects: prospective customers, clients, partners.

Data categories: name, email, phone, the subject and content of the message, date/time; for postal mail, the sender's name/address and delivery date.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

Retention: until the purpose has been fulfilled; up to 5 years where a claim may be pursued; otherwise, an operational retention period of up to 30 days.

3.3. Social Media Presence (Facebook)

Purpose: corporate presence, communication, recruitment, and engagement.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

Note: due to how the platform operates, processing may be carried out jointly with the platform provider (Meta); further details are set out in that provider's own privacy notices.

3.4. Website Logging

Purpose: ensuring the website functions properly and securely; monitoring traffic and detecting misuse.

Data categories: (partial) IP address, time of visit, device/OS/browser type.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

Retention: typically 7 days, after which the data is automatically deleted.

3.5. Use of Cookies

What is a cookie? A small file stored in your browser while you use the website.

Categories: cookies necessary for the site to function (legal basis: legitimate interest), statistical cookies (legal basis: consent), marketing/comfort cookies (legal basis: consent).

4. Recipients and Data Processors

Beyond the Data Controller's own staff, external service providers (data processors) may also be involved.

• Hosting/operations: Hetzner Online GmbH (EU, Germany) – web server/infrastructure.
• Web analytics/video: Google Ireland Ltd. (GA4), YouTube LLC – cookie-based statistics and embedded content.
• Social media platforms: Meta Platforms Ireland Ltd. (Facebook).

International data transfers: for certain providers, data may also be transferred outside the EEA; legal basis: EU Standard Contractual Clauses (SCCs) and supplementary safeguards.

5. Data Security

The Data Controller applies appropriate technical and organizational measures (access controls, password protection, logging, regular backups, vulnerability management) in line with the principle of "necessary and proportionate."

6. Handling of Data Breaches

In the event of a breach, we carry out a risk assessment, implement remedial measures, and, where required, notify the supervisory authority within 72 hours; where the risk is high, affected individuals are informed. A breach register is maintained.

7. Data Subjects' Rights

• Withdrawing consent (where consent is the legal basis).
• Accessing the data we process and requesting information about it.
• Rectifying inaccurate data.
• Erasure ("the right to be forgotten") under the conditions set out in the GDPR.
• Requesting restriction of processing.
• Data portability (where the legal basis is contract or consent).
• Objecting to processing based on legitimate interest.

Requests can be submitted to periszkop@periszkop.hu or by post to: 1221 Budapest, Tokaji utca 10, Hungary.
Response time: generally 1 month (extendable by up to 2 months where justified).

Complaints: National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa u. 9–11, Hungary
Phone: +36-1-391-1400
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu

Judicial remedy: proceedings may also be brought before the competent regional court based on your place of residence.

8. Summary of Cookie Use (see separate Cookie Notice)

Detailed, up-to-date information on the cookies used on this website is provided in a separate Cookie Notice.

9. Final Provisions

• This notice may be updated to reflect changes in our services or applicable law.
• The version currently in force is always available on our website.
• This document applies solely to the data processing activities of PERISZKÓP Média- és Piackutató Korlátolt Felelősségű Társaság.