Imprint

  • Name: GridCore Energy Ltd.
  • Short Name: GridCore Energy
  • Address: 1027 Budapest, Szász Károly Street 1, 2nd floor, 2nd door
  • E-mail: info@gridcore.hu
  • Tax Number: 23538269-2-41

General Data Protection Notice

This General Data Protection Notice (hereinafter: “Notice”) sets out the rights and obligations of GridCore Energy Limited Liability Company (hereinafter: “Service provider” or “Data Controller”) and clients (hereinafter: “Data Subject” or “Client”) who use the services provided via the website https://gridcoreenergy.hu (hereinafter: “Website”). The Service provider and Client together may be referred to as the “Parties.” This Notice applies to all legal transactions and services realized through the Website.

Introduction

In the course of its activities, GridCore Energy Ltd. pays special attention to the protection of personal data, compliance with mandatory laws, and ensuring secure and fair data processing.

Data Controller's Details

The Data Controller handles personal data provided to it in all cases in compliance with applicable Hungarian and European laws, and takes the necessary technical and organizational measures to ensure data security.

Legal Basis (Illustrative)

The Data Controller commits to adhere to this policy and reserves the right to modify it. Modified versions of the policy will be published publicly.

Definitions / Interpretation

In this Notice, the terms “personal data,” “consent,” “objection,” “data controller,” “data processor,” “data processing,” “data transfer,” “data storage,” “erasure,” “destruction,” “profiling,” “third party,” “EEA state,” “third country,” and “data protection incident” shall be understood as defined in Article 4 of the GDPR and as per the Info Act.

Technical and Organizational Measures

The Data Controller selects and operates IT systems such that:

Data are protected by appropriate measures against unauthorized access, alteration, transfer, disclosure, deletion or destruction, and against accidental loss — in physical, logical, and administrative controls alike.

Principles of Data Processing

Personal data shall be processed only for specified, lawful purposes, in accordance with necessity and proportionality, to the extent and duration required to achieve the purposes. During all stages of data processing, the principles of purpose limitation, data minimization, accuracy, limited storage, and accountability shall apply.

Legal Bases and Purposes of Data Processing

Processing is carried out electronically and/or in paper form with appropriate access control and authorization management.

Data of Website Visitors, Cookies

This website does not use cookies. When contacting us, data provided will only be processed for handling the inquiry.

Processing of Data Provided in Contact

If you contact us by e-mail or via a form, your e-mail address and the personal data given in the message will be processed until the inquiry is answered or for the duration of handling the matter, and then deleted after any retention obligation (if applicable) expires. We do not build a database from these, do not profile, and do not transfer the data to third parties — unless required by law or explicitly requested/consented by you.

Data Transfers & International Transfers

Data are transferred to third parties only on a lawful basis and to the necessary extent (e.g. accountant, legal representation, IT operator). In case of transfer to third countries, guarantees under Chapter V of the GDPR (e.g. adequacy decision, EU standard contractual clauses) are applied.

Retention Periods (Guidelines)

Rights of Data Subjects

Supervisory Authority:

National Authority for Data Protection and Freedom of Information (NAIH)
Address: Falk Miksa Street 9-11, 1055 Budapest
Postal address: 1363 Budapest, Pf. 9
Phone: +36 (30) 683-5969, +36 (30) 549-6838
E-mail: ugyfelszolgalat@naih.hu
Web: naih.hu

Exercising Rights / Contact

You may send your requests or questions to info@gridcore.hu or by post to our registered seat. The Data Controller shall respond without undue delay, and no later than one month (in justified cases may be extended by two further months).

Data Breach / Incident Handling

In the event of a data protection incident, risk assessment shall be carried out, and if necessary, a notification to the NAIH will be made within 72 hours, and — in the case of high risk — the Data Subject will also be notified.