The purpose of this document is to provide detailed information on how our Company processes your personal data when you visit our website or use our services.

1. Our Principles of Data Processing

In the course of its data management activities, our Company adheres to the following principles:

• We process your personal data lawfully, fairly, and transparently.
• We collect data only for specific, clear, and lawful purposes, and we use the data only in accordance with these purposes.
• We only process data that is necessary, relevant, and proportionate to the purpose of data processing.
• We make every effort to ensure that the data we process is accurate and up to date; inaccurate data will be corrected or deleted without delay.
• We retain data only for as long as necessary to achieve the purpose of processing, after which we delete or anonymize it.
• We apply appropriate technical and organizational security measures to protect data from unauthorized access, accidental destruction, or unlawful use.
• Data processing is always based on your voluntary and informed consent and is carried out only to the extent necessary.
• In some cases, data processing may be based on legal obligations or legitimate interests (e.g., website security, operation, or development). In such cases, we provide separate information.

2. Who We Are

Company name: Domiline Kft.
Registered office and mailing address: 8000 Székesfehérvár, Fűtőház utca 22.
Website: www.domiline.hu
E-mail address: stone@domiline.hu
Tax number: 11116154-2-07
Company registration number: 07-09-003861

Under Article 37 of the GDPR, our Company is not required to appoint a data protection officer.

Our hosting provider:
Hosting provider name: "DATATRANS Internet" Kft.
Hosting provider address: 8000 Székesfehérvár, Budai út 9–11. II. floor 24.
Hosting provider website: www.datatrans.hu
Hosting provider e-mail: ugyfelszolgalat@datatrans.hu
If the range of our hosting or other data processing partners changes, we will update this notice accordingly.

Data We Process
On our website, we only request personal data from visitors if they wish to register or log in.
The personal data provided during registration or when using our marketing services are not linked together, and we do not aim to identify visitors.
If you require more information about data processing, you may send your questions to stone@domiline.hu by e-mail or by post. We will respond within 15 days, but no later than one month, using your provided contact information.

3. Use of Cookies

Cookies are small data files that our website saves to your computer or mobile device while you are browsing.
Most browsers accept cookies by default, but you may change your settings at any time to disable or delete them.
Detailed information can be found in your browser’s “Help” menu.
Some cookies do not require your consent (for example, authentication, load-balancing, multimedia player, or security cookies).
We inform you about these when you first visit our website.
For cookies requiring consent (e.g., marketing or statistical cookies), we explicitly ask for your permission upon your first visit.
Our Company does not allow cookies through which third parties could collect data without your consent.
The use of cookies is not mandatory, but disabling them may affect the operation of certain website features.

4. Data Processing Related to Website Use

You provide your data voluntarily when registering or contacting us, so please ensure that it is accurate and correct.
Providing incorrect data may prevent us from delivering our services.
If you provide someone else’s data, we assume you are authorized to do so.

You may withdraw your consent at any time, free of charge:

• by deleting your registration,
• by withdrawing your consent,
• or by requesting the restriction of data processing.

Processing of your withdrawal request may take up to 30 days for technical reasons.
However, certain data may still be processed due to legal obligations or legitimate interests.

In case of misuse of false data or any legal violation, our Company may initiate the deletion or retention of data for legal proceedings.

5. Other Data Processing Information

We only transfer personal data within the limits of the law, and our contracts with data processors specify that they may use your data only for defined purposes.

Our Company does not transfer data abroad.

In case of a lawful request (e.g., from a court, prosecutor, police, tax authority, or NAIH), we are obliged to provide data, but only to the necessary extent.

Employees and partners involved in data processing are bound by confidentiality and may access data only to the extent necessary.

Our IT systems are protected by encryption, password protection, and antivirus measures.

Although online data transmission is not entirely risk-free, we take all possible measures to ensure data security.

Please handle your password securely and do not share it with others.

6. Your Rights and Remedies

You have the following rights regarding data processing:

• to request information about data processing,
• to have your data corrected, modified, or supplemented,
• to object to data processing, and to request deletion or restriction (except for mandatory processing),
• to initiate legal proceedings,
• to file a complaint with the supervisory authority.

Supervisory Authority: National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11.
Mailing address: 1363 Budapest, P.O. Box 9.
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat@naih.hu
Website: https: //naih.hu

Data Subject Rights and Handling of Requests

Upon your request, our Company will provide information about your personal data processed by us or by our authorized data processor, as well as the following:

• the source of the data,
• the purpose and legal basis of processing,
• the duration of processing, or if not determinable, the criteria for determining it,
• the name, address, and activities of our data processors,
• the circumstances and effects of any data breaches, and measures taken to prevent or remedy them,
• the legal basis and recipient of any data transfers (if applicable).

We provide information within 15 days of receiving your request, but no later than one month.
Information is provided free of charge unless you have already submitted a similar request concerning the same data within the same year.
In cases of unlawful processing or justified correction requests, any related costs will be refunded.

We may refuse to provide information only in cases defined by law, in which case we will indicate the legal reference and inform you about your right to legal remedy and to contact the supervisory authority.

Our Company will notify you and all recipients to whom the data has been previously transferred of any correction, restriction, marking, or deletion of data, unless such notification would infringe your legitimate interest.

If we cannot fulfill your request for correction, restriction, or deletion, we will inform you of the reasons within 15 days (no later than one month) in writing or electronically if you consent. At the same time, we will inform you of your legal remedies.

If you object to the processing of your personal data, we will examine your objection within 15 days (no later than one month) and notify you in writing of our decision.
If the objection is justified, we will terminate processing (including further data collection or transfer), restrict the data, and inform all recipients to whom the data was previously transferred.

We may refuse your request if we can prove that the processing is justified by an overriding legitimate interest that takes precedence over your rights, or is necessary for legal claims.

If you disagree with our decision or do not receive a response within the given deadline, you may turn to court within 30 days from the notification or the expiry of the deadline.

Data protection lawsuits fall under the jurisdiction of the regional court. You may bring the case before the court in your place of residence or stay. Foreign citizens may also submit a complaint to the supervisory authority in their own country.

Before turning to the supervisory authority or court, please contact us first so we can try to find a quick and peaceful resolution.

7. Applicable Laws

• Regulation (EU) 2016/679 of the European Parliament and Council (GDPR)
• Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act)
• Act V of 2013 on the Civil Code (Civil Code)
• Act CVIII of 2001 on Electronic Commerce Services (E-commerce Act)
• Act C of 2003 on Electronic Communications (E-communications Act)
• Act CLV of 1997 on Consumer Protection (Consumer Protection Act)
• Act CLXV of 2013 on Complaints and Whistleblowing (Complaints Act)
• Act XLVIII of 2008 on Economic Advertising Activities (Advertising Act)

8. Amendments to This Notice

Our Company reserves the right to amend this Privacy Policy.

Any changes will be appropriately published on www.domiline.hu.

Székesfehérvár, 2025.10.07.