Privacy Policy
Last updated: 2026-06-23
Verde Holding Kft. (registered address: 8220 Balatonalmádi, Mátyás Király utca 65., Hungary; company registration no.: 19-09-525260; tax no.: 32872608-2-19; hereinafter: "Controller") provides this Privacy Policy to explain how we handle personal data in connection with the Bizonylat.hu service (hereinafter: "Service"), in compliance with the EU General Data Protection Regulation (GDPR) 2016/679.
1. Controller contact details
| Company | Verde Holding Kft. |
|---|---|
| Address | 8220 Balatonalmádi, Mátyás Király utca 65., Hungary |
| Registration no. | 19-09-525260 |
| Tax no. | 32872608-2-19 |
| Managing Director | Csaba Dióssy |
| Contact | office@verdeholding.hu |
2. Data we process and why
2.1 Account registration and management
- Data: name, email address, hashed password, business name, tax number, address.
- Purpose: creating and maintaining your user account and subscription.
- Legal basis: GDPR Art. 6(1)(b) — performance of a contract.
- Retention: until account deletion, then 30 days.
2.2 Billing data
- Data: billing address, payment transaction reference (card data is held solely by our payment processor).
- Purpose: invoicing subscription fees; meeting statutory accounting obligations.
- Legal basis: GDPR Art. 6(1)(b) and (c) — contract and legal obligation (Hungarian Accounting Act: 8-year retention).
- Retention: 8 years.
2.3 Data you store in the Service
You may store your own customers' data (e.g., company name, address, tax number, email) within Bizonylat.hu. For this data, Verde Holding Kft. acts as a data processor on your behalf; you remain the data controller responsible for the legal basis of that processing. Details are set out in our Data Processing Agreement.
2.4 Analytics
- Data: anonymised IP address, browser type, pages viewed, session data.
- Purpose: improving the Service; traffic statistics.
- Legal basis: GDPR Art. 6(1)(a) — consent (via cookie banner).
- Tool: Google Analytics 4 (Google LLC, USA). Data is transferred to the USA under the EU–US Data Privacy Framework.
- Retention: 14 months (GA4 default).
2.5 Customer support communications
- Data: email address, message content.
- Purpose: answering queries and resolving issues.
- Legal basis: GDPR Art. 6(1)(f) — legitimate interests.
- Retention: 2 years.
3. Sub-processors
| Processor | Role | Location |
|---|---|---|
| Stripe, Inc. | Payment processing | USA (SCCs) |
| OTP Mobil Kft. (SimplePay) | Payment processing | Hungary |
| Resend, Inc. | Transactional email delivery | USA (SCCs) |
| Google LLC | Web analytics (Google Analytics) | USA (DPF) |
| Cloudflare, Inc. | CDN, Workers, storage | USA (SCCs) |
| Neon, Inc. | Database hosting | USA (SCCs) |
| Upstash, Inc. | Cache (Redis) | USA (SCCs) |
| Vercel, Inc. | SaaS application hosting | USA (SCCs) |
| Fly.io, Inc. | API server hosting | USA (SCCs) |
SCCs = Standard Contractual Clauses approved by the European Commission; DPF = EU–US Data Privacy Framework.
4. Your rights
Under the GDPR you have the right to: access, rectification, erasure, restriction of processing, data portability, and objection. Submit your request to office@verdeholding.hu; we will respond within 30 days.
You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): naih.hu, 1055 Budapest, Falk Miksa utca 9–11.
5. Data security
We implement appropriate technical and organisational measures to protect your data, including database encryption, HTTPS, and access controls.
6. Changes to this policy
We may update this Privacy Policy at any time. For material changes, we will notify you by email. The effective date is the "Last updated" date shown at the top of this page.