Data protection
Privacy notice
Effective 19 July 2026 · Version 1.0
1. Controller
| Name | Tápió Építő Kft. |
|---|---|
| Seat | 2600 Vác, Borvirág utca 10/a., Hungary |
| Registration | 13-09-066445 |
| VAT | 10815740-2-13 |
| Contact | adatkezeles@siteenergy.hu |
No data protection officer has been appointed; under Article 37 GDPR we are not required to designate one.
2. This website
In its current form this website collects no personal data. There are no cookies, no analytics, no embedded third-party content and no forms. Fonts are served from our own server rather than a font CDN, so your browser contacts no third party during your visit.
If you email us, we process the details in that correspondence (name, email address, message) in order to answer you, on the basis of legitimate interest, and keep it for at most one year after the matter is closed.
The web server keeps an operational log (timestamp, truncated IP address, requested page) for security and troubleshooting, retained for at most 90 days.
3. The SiteEnergy service
The processing below will apply once the software goes live. We will update this section before launch.
3.1 Account and access
Data: pseudonymous user identifier, plan, expiry date. Basis: performance of a contract (Art. 6(1)(b) GDPR). Retention: one year after the contract ends.
3.2 Billing
Data: billing name, address, VAT number, order details. Basis: legal obligation (Art. 6(1)(c) GDPR). Retention: eight years under Hungarian accounting law.
3.3 Audit log
The system logs significant user actions: sign-in, failed sign-in, site creation, file upload, data generation, calculation, printing, export.
What is recorded: timestamp, truncated IP address (last octet zeroed), pseudonymous user identifier, plan, event type and a few quantitative details.
What is deliberately NOT recorded: client names, addresses, coordinates, uploaded file names or contents, measured values, calculation results, passwords or access keys. On a failed sign-in the rejected key is not logged either. The log is neither suitable nor permitted for employee performance monitoring.
Basis: legitimate interest (Art. 6(1)(f) GDPR) — operational security, troubleshooting, detection of misuse. Retention: 90 days, then automatic deletion.
3.4 Data uploaded by the user
For data entered into the software — client names, addresses, consumption time series — the user (or their employer) is the controller and Tápió Építő Kft. acts as processor. We process such data solely to provide the service, on the user's instructions, under a data processing agreement.
4. Processors
| Provider | Role | Location |
|---|---|---|
| RackForest Kft. | hosting (website, application) | Hungary |
| Zoho | email (storage of messages sent to us) | EU — Zoho's European data centre |
At launch the payment provider and the invoicing system will also become processors; we will update this list then.
5. Your rights
You may request access to your data, its rectification or erasure, restriction of processing and data portability, and you may object to processing based on legitimate interest — including the audit log.
Write to adatkezeles@siteenergy.hu or to our registered seat. We respond within one month; in complex cases this may be extended by two months, of which we will inform you. There is no charge.
6. Remedies
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
| Address | 1055 Budapest, Falk Miksa utca 9–11., Hungary |
|---|---|
| Postal | 1363 Budapest, Pf.: 9. |
| ugyfelszolgalat@naih.hu | |
| Phone | +36 (1) 391-1400 |
| Web | naih.hu |
You may also bring the matter before a court, including the tribunal competent for your place of residence. Such proceedings are exempt from court fees in Hungary.
7. Changes
We review this notice annually and whenever processing changes materially — in particular at the launch of the service, when new categories of data and new processors come into scope. Users will be notified in advance.