en

Data Protection Policy

1. Introduction

TC Automation Korlátolt Felelősségű Társaság (registered office: H-1135 Budapest, Reitter Ferenc utca 88/A; tax number: 32417711-2-41; company registration number: 01-09-438709; hereinafter: "Company" or "Data Controller") is committed to protecting the personal data it processes.

This Data Protection Policy (hereinafter: "Policy") regulates the Company's data processing activities in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable Hungarian data protection legislation.

This Policy forms a mandatory annex to all contracts concluded by the Company with its contractual partners.

2. Data Controller Details

  • Company name: TC Automation Korlátolt Felelősségű Társaság
  • Short name: TC Automation Kft.
  • Registered office: H-1135 Budapest, Reitter Ferenc utca 88/A
  • Tax number: 32417711-2-41
  • Company registration number: 01-09-438709
  • Phone: +36-20-271-8221
  • E-mail: info@tcautomation.hu
  • Website: tcautomation.hu

3. Principles of Data Processing

The Company observes the following principles in all data processing activities:

  • Lawfulness, fairness and transparency: personal data is processed lawfully and in a transparent manner.
  • Purpose limitation: personal data is collected for specified, explicit and legitimate purposes only.
  • Data minimisation: only data necessary for the processing purpose is collected and processed.
  • Accuracy: personal data is kept accurate and, where necessary, up to date.
  • Storage limitation: data is retained only for as long as necessary for the stated purpose.
  • Integrity and confidentiality: appropriate technical and organisational measures are applied to ensure data security.

4. Categories of Data Processed and Purposes

4.1. Data of Contractual Partners

Data processed in the course of establishing, performing and terminating a contractual relationship:

  • Data subjects: natural persons who are contractual partners; contact persons and representatives of legal entities
  • Data processed in respect of natural persons: name, place and date of birth, mother's birth name, address, tax identification number, bank account number, e-mail address, phone number
  • Data processed in respect of contact persons/representatives of legal entities: name, position, e-mail address, phone number; name, registered office, tax number, company registration number, bank account number and mailing address of the legal entity
  • Purpose: entering into and performing contracts, invoicing, communication
  • Legal basis: GDPR Article 6(1)(b) – performance of a contract
  • Retention period: 5 years from the termination of the contractual relationship; 8 years for accounting documents

4.2. Project-Related Data

  • Data subjects: clients, subcontractors, regulatory contacts
  • Data processed: professional qualifications, authorisations, contact details
  • Purpose: design and implementation of building automation, energy management and industrial automation projects
  • Legal basis: GDPR Article 6(1)(b) and (c) – performance of a contract; compliance with a legal obligation
  • Retention period: 10 years from project completion (warranty and guarantee claims)

4.3. Enquiry and Contact Data

  • Data processed: name, e-mail address, phone number, content of the message
  • Purpose: providing quotations, establishing business relationships
  • Legal basis: GDPR Article 6(1)(f) – legitimate interests
  • Retention period: 2 years from the end of the business relationship

5. Rights of Data Subjects

Data subjects may exercise the following rights:

  • Right of access: you may request information about the personal data we hold about you.
  • Right to rectification: you may request the correction of inaccurate data.
  • Right to erasure ('right to be forgotten'): you may request deletion of your data if the legal basis for processing has ceased to exist.
  • Right to restriction of processing: you may request the suspension of data processing.
  • Right to data portability: you may request your data in a structured, machine-readable format.
  • Right to object: you may object to processing based on legitimate interests.

To exercise your rights, please contact us at:

  • E-mail: info@tcautomation.hu
  • Postal address: H-1135 Budapest, Reitter Ferenc utca 88/A

We will respond to your request within 30 days. For further recourse, you may contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, www.naih.hu) or the supervisory authority competent in your place of residence.

6. Data Transfers and Data Processors

The Company transfers personal data to third parties only with the data subject's consent, on the basis of a legal obligation, or where a legitimate interest exists.

Our data processors (e.g. accountants, courier services) process data solely on the Company's instructions and provide appropriate data security guarantees.

Personal data is transferred to third countries (outside the EU/EEA) only where adequate safeguards are in place (e.g. EU Standard Contractual Clauses).

7. Data Security

The Company applies technical and organisational measures appropriate to the nature, scope and risks of processing, including:

  • access control and password protection
  • encrypted data transmission (SSL/TLS)
  • regular data backups
  • employee data protection training
  • secure storage of paper-based records

8. Cookies

Cookies are used on the Company's websites. Detailed cookie information is available on each respective website.

9. Amendments to this Policy

The Company reserves the right to amend this Policy unilaterally. Data subjects will be notified of any amendments prior to their entry into force. The current version of the Policy is always available at the Company's registered office and on its website.

10. Entry into Force

This Policy enters into force on 1 June 2026 and remains in effect until revoked.

Budapest, May 29 2026.