Introduction
The service provider / data controller processes the data of those individuals who contact them by phone or e-mail (quote request, on-site survey arrangement, order) for the purpose of responding to the enquiry and providing the requested service.
The service provider wishes to comply fully with the statutory provisions on the processing of personal data, in particular those laid down in Regulation (EU) 2016/679 of the European Parliament and of the Council.
This data processing notice has been prepared in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, taking into account the provisions of Act CXII of 2011 on the right of informational self-determination and on freedom of information.
Name of service provider, data controller:
| Name / company name: | TETŐ MESTERFOKON Kft. |
| Registered office: | 9061 Vámosszabadi, Halász u. 52. |
| Tax number: | 27087246-2-08 |
| Company registration number: | 08-09-031357 |
| Website name, address: | www.tetomesterfokon.com |
Contact details of the data controller:
| Name / company name: | TETŐ MESTERFOKON Kft. |
| Registered office: | 9061 Vámosszabadi, Halász u. 52. |
| Correspondence address: | 9061 Vámosszabadi, Halász u. 52. |
| E-mail: | info@tetomesterfokon.com |
| Telephone: | +36 20 553 2800 |
Definitions
a GDPR (General Data Protection Regulation) is the European Union’s new Data Protection Regulation;
data processing: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
data processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
data controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
consent of the data subject: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
personal data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Principles of data processing
The controller declares that it processes personal data in accordance with the information provided in the data processing notice and complies with the provisions of the relevant legislation, with particular regard to the following:
Personal data must be processed lawfully, fairly and in a transparent manner in relation to the data subject.
Personal data may only be collected for specified, explicit and legitimate purposes.
The purpose of processing personal data must be adequate, relevant and limited to what is necessary.
Personal data must be accurate and kept up to date. Inaccurate personal data must be erased without delay.
Personal data must be kept in a form which permits identification of data subjects for no longer than is necessary. Personal data may be stored for longer periods only where the storage is for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
Personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
The principles of data protection must be applied to any information relating to an identified or identifiable natural person.
Important data processing information
The purpose of data processing is to respond to enquiries, conduct on-site surveys and agree quotes, and to complete the ordered work.
The legal basis for data processing is the consent of the data subject.
The scope of data subjects: persons who contact the provider by phone or email.
Duration of data processing and deletion of data. The duration of data processing always depends on the specific user purpose, but the data must be erased without delay if the originally intended purpose has been fulfilled. The data subject may withdraw their consent to data processing at any time by sending an email to the contact email address. If there is no legal obstacle to deletion, the data will be deleted in such cases.
The controller and its employees are entitled to access the data.
The data subject may request from the controller access to personal data concerning them, their rectification, erasure or restriction of processing, and may object to the processing of such personal data, as well as the right to data portability.
The data subject may withdraw their consent to data processing at any time, but this does not affect the lawfulness of the data processing carried out on the basis of consent before the withdrawal.
The data subject has the right to lodge a complaint with the supervisory authority.
The data subject is not obliged to provide personal data, and failure to provide data does not entail any adverse consequences for them; however, providing the necessary contact details is essential for responding to the enquiry and preparing a quote. Use of the website does not require registration.
The data subject is entitled to request that the controller rectify or supplement inaccurate personal data concerning them without undue delay.
The data subject is entitled to request that the controller erase inaccurate personal data concerning them without undue delay, and the controller is obliged to erase the personal data concerning the data subject without undue delay where there is no other legal basis for the data processing.
The modification or deletion of personal data may be initiated by email, telephone or post using the contact options provided above.
Cookies
A cookie is a small data file that the website places in the visitor’s browser. When our website is first opened, a cookie notice appears in which the visitor may accept (“Accept all”) or reject (“Reject all”) cookies for statistical and marketing purposes. Without consent, only cookies necessary for operation are placed in the browser.
Cookies used on this website (as at 24 October 2026):
| Cookie | Provider | Purpose | When placed | Validity |
| userConsent | Tető Mesterfokon Kft. (own) | Recording of the decision made in the cookie notice | At the time of choice, both upon acceptance and rejection | 1 year |
| tmf-theme (browser local storage) | Tető Mesterfokon Kft. (own) | Recording of the selected light/dark view | Only when the visitor clicks the view toggle button | until browser data is cleared |
| _ga, _ga_JF84GJWKK5 | Google (Google Analytics) | Visit statistics | Only after acceptance | maximum 2 years |
| _gcl_au | Google (Google Ads) | Advertising conversion measurement | Only after acceptance | 90 days |
| IDE (doubleclick.net) | Google (Google Ads) | Measurement and display of ads | Only after acceptance | maximum 13 months |
| _fbp | Meta Platforms (Meta Pixel) | Measurement of Facebook ads | Only after acceptance | 90 days |
The validity periods of Google and Meta cookies are determined by the respective provider; the above values are based on the providers’ information.
Google Consent Mode. Google tags (Google Tag Manager, Google Analytics, Google Ads) start with a rejected consent state when the website loads. In this state they do not place cookies, but they may send cookieless, identifierless measurement signals to Google (for example, the fact that the page was viewed). After acceptance, the above Google cookies are also created.
External content without cookies. Certain elements of the website are loaded from external providers’ servers: fonts (Google Fonts), display of Google reviews (Trustindex, profile images from Google servers), and YouTube video preview images. These do not place cookies during loading, but the browser technically sends the visitor’s IP address to the relevant provider. The YouTube video only loads after clicking play; at that point YouTube (Google) may place cookies in accordance with its own rules.
The legal basis for data processing. No consent is required for storing the userConsent cookie necessary for operation and the view setting requested by the visitor (tmf-theme) (Section 155(4) of Act C of 2003 on Electronic Communications). Statistical and marketing cookies are placed exclusively with the visitor’s consent (GDPR Article 6(1)(a)). Consent can be withdrawn at any time; withdrawal does not affect the lawfulness of data processing prior to withdrawal.
Changing consent, deleting cookies. The decision can be changed at any time: open cookie settings. The cookie notice will also reappear if the visitor deletes the tetomesterfokon.com cookies in their browser. Cookies can be deleted or disabled at any time in the browser settings (usually Settings → Privacy → Cookies and site data).
About Google’s data processing: https://policies.google.com/technologies/cookies?hl=hu. About Meta’s data processing: https://www.facebook.com/privacy/policies/cookies/.
Social media pages
A social media page is a media tool where the message is distributed through community users. Social media uses the internet and online presence opportunities to turn users from content consumers into content editors.
Social media is the interface of internet applications where user-generated content is found, such as Facebook, Instagram, YouTube, etc.
Forms of social media presence may include public speeches, presentations, demonstrations, product or service descriptions.
Forms of information appearing on social media may include forums, blog posts, image, video and audio materials, walls, email messages, etc.
In accordance with the above, the scope of processed data may include the user’s public profile picture in addition to personal data.
Scope of data subjects: persons contacting the service provider.
The purpose of data collection is the promotion of the website or the related web page.
The legal basis for data processing is the data subject’s voluntary consent.
Duration of data processing: according to the regulations viewable on the given social media page.
Data deletion deadline: according to the regulations viewable on the given social media page.
Persons entitled to access the data: according to the regulations viewable on the given social media page.
Rights related to data processing: according to the regulations viewable on the given social media page.
Method of data storage: electronic.
It is important to note that when a user uploads or submits any personal data, they grant the social media page operator a worldwide valid licence to store and use such content. Therefore, it is very important to ensure that the user has full authorisation to communicate the published information.
Google Analytics
Google Analytics compiles a report for its clients on the habits of website users based on internal cookies.
At the website operator’s commission, Google uses the information to
evaluate how users use the website. As an additional service, it prepares reports related to website activity for the website operator so that they can perform further services.
Google’s servers store the data in encoded format to make misuse of the data more difficult and prevent it.
Google Analytics can be disabled as follows. Quote from the page:
Website visitors who do not want Google Analytics JavaScript to report on their data can install the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sending information to Google Analytics. The browser add-on is available for most modern browsers. The Google Analytics opt-out browser add-on does not prevent data from being sent to the website itself or to other web analytics services.
https://support.google.com/analytics/answer/6004245?hl=hu
Google’s privacy policies: https://policies.google.com/privacy?hl=hu
Detailed information on the use and protection of data is available at the links above.
Privacy in detail:
Data processors
Hosting provider:
| Name / company name: | Websupport Magyarország Kft. |
| Registered office: | 1119 Budapest, Fehérvári út 97–99. |
| Telephone: | +36 1 700 2323 |
| E-mail: | info@mhosting.hu |
The data you provide is stored on a server operated by the hosting provider. Only our staff and the staff operating the server can access the data, and all of them are responsible for the secure handling of the data.
The activity is described as: hosting service, server service.
The purpose of data processing: to ensure the operation of the website.
The data processed: personal data provided by the data subject
The duration of data processing and the deadline for data deletion. Data processing lasts until the end of the website’s operation, or according to the contractual agreement between the website operator and the hosting provider. The data subject may also request the deletion of their data by contacting the hosting provider if necessary.
The legal basis for data processing is the consent of the data subject, or data processing based on legislation.
Rights related to data processing
Right to request information
You can request information from us via the contact details provided about what data of yours our company processes, on what legal basis, for what data processing purpose, from what source, and for how long. At your request, we will send information to the e-mail address you provided without delay, but within 30 days at the latest.
Right to rectification
You can request via the contact details provided that we amend any of your data. We will act on your request without delay, but within 30 days at the latest, and send a notification to the e-mail address you provided.
Right to erasure
You can request the deletion of your data via the contact details provided. We will fulfil your request without delay, but within 30 days at the latest, and send a notification to the e-mail address you provided.
Right to restriction
You can request the restriction of your data through the contact details provided. The restriction lasts as long as the reason indicated by you makes the storage of the data necessary. At your request, we will do this without undue delay, but within 30 days at the latest, and we will send a notification to the email address you provided.
Right to object
You can object to the data processing through the contact details provided. We will examine the objection within the shortest possible time from the submission of the request, but within 15 days at the latest, make a decision on the question of its justification, and inform you of the decision by email.
Legal remedy options related to data processing
In the event of unlawful data processing experienced by you, please notify our company, thus enabling the lawful state to be restored within a short time. In your interest, we will do everything to ensure that the outlined problem is resolved.
If, in your judgement, the lawful state cannot be restored, please notify the authority at the following contact details:
The President of the National Authority for Data Protection and Freedom of Information (NAIH):
Dr. Péterfalvi Attila
The NAIH mailing address: 1363 Budapest, PO Box 9.
Address: 1055 Budapest, Falk Miksa u. 9-11.
Telephone: +36 1 391 1400
Fax: +36 1 391 1410
Website: http://www.naih.hu
Email address: ugyfelszolgalat@naih.hu
The legal regulations serving as the basis for data processing
REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information.
Act LXVI of 1995 on Public Records, Public Archives and the Protection of Private Archives.
Government Decree 335/2005 (XII. 29.) on the General Requirements for the Records Management of Bodies Performing Public Duties.
Act CVIII of 2001 on Certain Issues of Electronic Commercial Services and Information Society Services.
Act C of 2003 on Electronic Communications.
Problem with your roof?
After a free on-site survey we give you an itemised quote.