Privacy statement
1. INTRODUCTION
We prioritize compliance with current data protection regulations and laws. Below, we provide a detailed discussion of the steps taken by www.bhgeu.com and BH Group Zrt. regarding data protection and the processes associated with data collection.
BH Group Zrt. manages the data and is responsible for handling personal data.
Contact Information:
Full legal name: BH Group Zrt.
Tax number: 32488447-2-09
Email: info@bhgeu.com
Head office address: 4143 Vekerd, Petőfi utca 23.
2. WHAT PERSONAL DATA DO WE PROCESS AND WHY?
Personal data is information that allows clear identification of an individual.
On www.bhgeu.com, we process the following personal data with the specified legal basis:
-
COMMUNICATION DATA
This includes any messages sent to us via the website, email, social media, or any other form of communication. We process and store these data to provide a basis for potential legal claims. The legal basis for processing this data is the user's legitimate interest in our activities, as expressed in messages directed to us. -
USER DATA
This includes data generated through website usage, allowing for the site’s technical operation, maintaining security, storing user activity records, and ensuring access to the most relevant content. The legal basis for processing this data is the user’s legitimate interest in our activities, which requires storage for site functionality. -
TECHNICAL DATA
This includes data generated during site usage, such as IP addresses, login information, browser data, visit times for specific pages, page views and navigation paths, visit frequency, time zone settings, and device information. Data originates from our analytics software. We process this data to analyze user behavior on the site, maintain site security, and assess the effectiveness of marketing decisions. The legal basis is the user's legitimate interest in our activities, allowing us to process this data securely and improve business operations. -
MARKETING DATA
This includes visitor preferences for marketing content. We process these data to send advertising related to our products/services that the user has shown interest in. Periodically, we may use collected data to deliver targeted, relevant ads on platforms such as Facebook™ and various dynamic advertising channels and to measure ad effectiveness. The legal basis is the user’s legitimate interest in our activities, allowing us to process this data securely and improve business effectiveness.
We do not collect sensitive data such as ethnicity, religious beliefs, sexual orientation, political views, trade union membership, health background, or genetic or biometric information.
3. HOW DO WE COLLECT DATA?
We may collect personal data provided directly by the user (e.g., by sending a message). Additionally, certain data are collected automatically during website usage, such as through “cookies” and similar technologies. These only activate upon user consent.
Certain data may also be received from external partners, such as analytics providers (e.g., Google, a non-EU partner), advertising networks (e.g., Facebook™, a non-EU partner), and payment providers (e.g., PayPal and Barion, both non-EU partners).
4. OUR PRACTICAL STEPS FOR DATA PROTECTION
BH Group Zrt. is highly committed to user data protection and regulatory compliance. After conducting a data protection impact assessment on www.bhgeu.com, we listed the collected data, assessed its necessity, legal basis, and regulatory compliance.
To protect the data provided through forms and generated on the site, we use SSL certification on the entire website (Let’s Encrypt Authority X3 certification). Additionally, premium security software is implemented to defend the site against brute force and virus attacks.
Our databases store user and purchasing data in an encrypted (pseudonymized) format, making it unreadable to third parties.
This privacy policy provides forms for users to request information, modify or delete their personal data.
At times, we may need to share data with essential service partners (e.g., hosting providers, newsletter software providers). In such cases, we ensure that the chosen partners comply with GDPR requirements and, if US-based, participate in the EU-US Privacy Shield initiative. We also sign data processing agreements with them to ensure responsible data handling.
5. MARKETING COMMUNICATION
Marketing communication is crucial for our business. The legal basis for data processing related to this is the interest shown in our services or the user’s explicit consent.
In accordance with the European Union’s Privacy and Electronic Communications Regulations (PECR), we send marketing messages to users who have explicitly consented to receive them. Users can easily unsubscribe from messages, as each email contains an unsubscribe link, or they can request removal from our database via info@bhgeu.com.
6. NOTES ON PERSONAL DATA
Occasionally, we may need to share certain personal data with partners to maintain normal business operations:
-
IT service providers and those performing troubleshooting and maintenance on IT systems.
-
Professional partners such as lawyers, accountants, bankers, and insurers.
-
Government bodies that request reports on our activities.
-
Payment providers that handle bank card data securely.
International Data Transfers
To maintain business continuity, we may need to share user data with partners outside the European Economic Area (EEA). Data may only be transferred to non-EEA countries that the European Commission considers secure or if the user provides explicit consent, which can be withdrawn at any time.
External Links
The site may occasionally contain links to external websites or embedded code to facilitate third-party services. By clicking on these links or using embedded solutions, users may enable third parties to collect data on them. We strive to select partners responsibly, but we are not responsible for the privacy practices of external sites.
7. DATA RETENTION PERIOD
User data is only retained as long as legally required for accounting, reporting, or other obligations or for service operation. For tax purposes, we must retain data for at least 8 years. In certain cases, we may use anonymized data for statistical purposes, stored indefinitely without user notification.
8. USER RIGHTS
As EU citizens, users have the following rights under the General Data Protection Regulation (GDPR):
-
Access to Personal Data
Users have the right to request a copy of their personal data held by www.bhgeu.com, typically free of charge and within 14 days of the request. -
Correction of Personal Data
Users have the right to request modifications to their personal data. For changes, please contact info@bhgeu.com. -
Request for Data Deletion
Users can request the deletion of all personal data free of charge, fulfilled within 14 days of the request. -
Restriction of Data Processing
Users can request restriction of data processing.