Privacy policy

The data controller

The controller of personal data submitted through this website is:

• Name: Pain Center Korlátolt Felelősségű Társaság
• Registered address: 1135 Budapest, Róbert Károly körút 96-100., Hungary
• Email: info@paincenter.hu

What data we process

The quote request form asks you for: your name, email address, the name of your organisation or company, and the text of your message. The form does not ask for a phone number.

When you submit an enquiry we automatically add which product it relates to, which language version of the site it came from, and which page it was sent from. These are not your personal data but context for the enquiry, so that we can reply in the right language about the right device.

This website does not use any analytics or tracking service: there is no Google Analytics or similar, and we do not build a profile of you.

While serving the website, the hosting provider keeps technical logs which may include your IP address, the time of the request and your browser identifier. These logs exist to operate and secure the service.

Purpose and legal basis

We process the data you enter in the form solely in order to answer your enquiry and prepare a quote. The legal basis is your consent (GDPR Article 6(1)(a)), which you give by ticking the checkbox before submitting the form.

The technical server logs are processed on the basis of our legitimate interest in operating and securing the website (GDPR Article 6(1)(f)).

We do not use the data for marketing and we do not send newsletters. No automated decision-making or profiling takes place.

Providing your data is voluntary

Filling in the form is not mandatory. However, without your name and email address we cannot reply to your enquiry, which is why those two fields are required. We ask for your organisation or company name so that we can prepare an appropriate quote.

Who may access the data

Within the company, the enquiry is accessible to those staff who need it in order to reply or prepare the quote.

AT PRESENT THE WEBSITE SENDS NOTHING. The quote request form is not live yet: what you type does not leave your browser and does not reach us. That is why our email address appears next to the form — an enquiry currently reaches us directly, from your own email client. It follows that no data processor whatsoever currently receives personal data from you through this website.

Emails sent this way are stored by the company’s email provider, while the website is served by the hosting provider, which also handles the technical server logs (IP address, timestamp). To that extent both act as data processors. Beyond this we do not pass your data to third parties and we do not sell it.

Hosting provider: Cloudflare, Inc. (Cloudflare Pages), 101 Townsend St., San Francisco, CA 94107, United States, dpo@cloudflare.com.

Cloudflare, Inc. is a United States company, so serving this website also involves a TRANSFER OF DATA TO A THIRD COUNTRY: a visitor’s IP address and the technical details of the request pass through the provider’s systems. This applies even if you fill in no form and accept no embedded content — opening the page is itself a request.

Email provider: Glória Ingatlan Kft., 1134 Budapest, Róbert Károly körút 96-100., Hungary. The email service runs on a server in Hungary, so — unlike the hosting — it does NOT involve a transfer of data to a third country.

If the quote request form goes live later, this section will change: the service receiving the form will be a new data processor and will have to be named here.

SAFEGUARDS FOR TRANSFERS TO THE UNITED STATES. Under the European Commission’s adequacy decision of 10 July 2023 (the EU-U.S. Data Privacy Framework), personal data may be transferred to certified participating US providers without further authorisation. The hosting provider states that it is a certified participant of the framework and additionally relies on the European Commission’s Standard Contractual Clauses (SCCs). Certifications can be verified at dataprivacyframework.gov, and we will provide information about the safeguards applied on request, at the email address above.

We may disclose data where required to do so by law or at the request of an authority.

Embedded videos (YouTube)

Some product pages include the manufacturer’s demonstration video. The video loads through YouTube, operated by Google Ireland Limited and Google LLC (United States). Loading it means your browser contacts Google’s servers, and in doing so Google may receive data about you, such as your IP address.

For this reason the video only loads after you consent. Until you accept embedded content, the website sends no request at all to Google — in place of the video you see a notice and a direct YouTube link, which you may choose to follow.

The videos load through the youtube-nocookie.com domain, which according to Google records less data. You can read about Google’s own data processing at policies.google.com/privacy. As Google is also a United States company, giving consent may involve a transfer of data to a third country.

Cookies and data stored in your browser

This website places NO cookies of its own in your browser. There is no analytics, no tracking and no profiling — not even Google Analytics.

It stores exactly one thing: your answer about embedded content. This is kept in the browser’s local storage under the name “pc-cookie-consent”, and its value records only whether you accepted or declined embedded content. It does not identify you and it never leaves your browser. We do not ask for separate consent for this entry, because its only purpose is to remember your decision — without it we would have to ask again on every page load.

ONE IMPORTANT EXCEPTION: if you accept embedded content, the YouTube player that then loads may place ITS OWN cookies and similar identifiers in your browser. These are not set by us but by Google, and Google’s own policy applies to them. Until you accept embedded content this does not happen — just as the video itself does not load.

You can change your decision at any time: use “Cookie settings” in the footer and the question will appear again, so you can decline what you previously accepted.

Retention period

We keep quote requests for as long as needed to answer the enquiry and for the validity period of the quote, after which we delete them.

Retention period: 3 years from the date of the quote request.

If an enquiry leads to a contract or an invoice, the related data must be kept for 8 years under Hungarian Act C of 2000 on accounting. This obligation remains even if you withdraw your consent.

Data security

The website is served over an encrypted connection (HTTPS), so the data you enter in the form cannot be read in transit. Incoming enquiries are handled only by staff authorised to access them.

Your rights

Under the General Data Protection Regulation (GDPR) you have the following rights:

• information and access: you may ask whether we process data about you, and what;
• rectification: you may ask us to correct inaccurate data;
• erasure: you may ask us to delete your data, unless a legal obligation requires us to keep it;
• restriction of processing;
• objection to processing based on legitimate interest;
• data portability: you may ask for your data in a machine-readable form;
• withdrawal of consent: at any time and without giving a reason. This does not affect the lawfulness of processing before the withdrawal.

How to exercise your rights, and where to complain

You can submit your request to info@paincenter.hu. We will respond within one month at the latest.

If you believe our processing has infringed your rights, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or bring a court action.

• Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
• Website: naih.hu
• Email: ugyfelszolgalat@naih.hu

Changes to this notice

If the way we process data changes — for example if we receive quote requests differently, or new embedded content is added to the site — we will update this notice and change the effective date.