1. Identification of the Data Controller
The website available at the internet address https://www.agrider.co/ is operated by
Agrider Gépkereskedelmi és Szolgáltató Zártkörűen Működő Részvénytársaság
Abbreviated name: Agrider Zrt.
Company registration number: 03-09-130136 - Kecskeméti Törvényszék Cégbírósága
Tax number: 25805493-2-03
Registered office: 6500 Baja, Szőlő utca 58.
Place of business activity: 6000 Kecskemét, Kisfái tanya 207. A. ép.
E-mail address: info@agrider.hu
(hereinafter: Data Controller).
2. Legislation Governing Data Processing, Scope of the Policy
2.1. The Data Controller specified above (hereinafter: Data Controller), operating the website available at the internet address specified above (hereinafter: website), provides its services from Hungary. Accordingly, the provision of the service, as well as the Users during the use of the service (including with regard to data processing), shall be governed by Hungarian and European law. The Data Controller processes Users' data on the basis of the provisions of
- REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation); (The EU General Data Protection Regulation - Az Európai Unió Általános Adatvédelmi Rendelete), (hereinafter: GDPR),
- Act CVIII of 2001 on certain issues of electronic commerce services and information society services (Ekertv.),
- and Act XLVIII of 2008 on the essential conditions and certain limitations of economic advertising activities (Grt.).
2.2. The scope of this policy applies to data processing taking place during the use of the website and the services available there.
2.3. Under this policy, User means: natural persons browsing the website or using the services of the website.
3. Legal Basis for Data Processing
3.1. The legal basis for the data processing carried out by the Data Controller is, with regard to certain data processing operations, the User's consent pursuant to Article 6(1)(a) of the GDPR.
3.2. In the case of data processing carried out on the basis of consent, the User grants consent by ticking the checkbox placed in front of the data processing statement at the relevant places. The User can read the privacy policy at any time by clicking on the "Adatkezelési tájékoztató" text displayed at the bottom of each page of the website, or by clicking on the link indicated by the text "Adatkezelési tájékoztató" in the data processing statement mentioned in this section, whereby the Data Controller ensures the clear and detailed prior notification of the User. By ticking the checkbox in front of the data processing statement, the User declares that they have read the privacy policy and, in knowledge of its content, consent to the processing of their data as described in this policy.
3.3. In certain cases, legislation obliges the Data Controller to perform certain data processing operations, and legitimate interests may also serve as a legal basis for data processing. The User can read about these in more detail below, in the chapters on individual data processing operations.
4. Data Processing Related to Ensuring the Operation of the Information Technology Service
4.1. Categories of data subjects: All Users visiting the website, regardless of the use of services available on the website.
4.2. Legal basis for data processing: Regarding the data processing technically strictly necessary for providing the service, Section 13/A of the Ektv. authorizes the Data Controller to process the data necessary for the proper operation of the website. Accordingly, the legal basis for processing such data is the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the GDPR. Under this legal basis, the Data Controller processes exclusively data necessary for the user-friendly operation of the website, and processes these data only for the time necessary for this purpose. These are technical data necessary for the enjoyable display of the website's pages and the proper and convenient use of its features for the user. The Data Controller does not transfer the data to third parties, nor does it process them for other purposes. The Data Controller engages the IT service provider(s) designated in Chapter 11 as data processor(s) regarding these data. In view of all this, the processing of these data involves no risk to the User, while at the same time the above purpose - the proper use of the website - cannot be achieved without processing the data. It is the legitimate interest of the Data Controller to ensure the usability of the website, as it can only provide its service this way, which is an indispensable condition for its operation. Therefore, the Data Controller processes the above data on the basis of its legitimate interest to achieve the purpose specified here, which legitimate interest - since the data processing involves no risk to the User - proportionally restricts the User's right to self-determination. During the visit analysis, only anonymous data are generated, from which the User cannot be identified. Anonymous data processing does not constitute the processing of personal data. The Data Controller does not collect browsing data for marketing activities.
4.3. Definition of the scope of processed data: Information technology data processing affects the scope of data necessary for the operation of "cookies" used to run the website and for the use of log files applied by the web hosting provider, as follows.
Data processed to enable user-friendly browsing:
- web pages visited during the visit to the website and the order in which they were opened
- IP address of the device used by the User.
Scope of data processed for measuring website traffic (anonymous data that cannot be linked to the User):
- web pages visited during the visit to the website and the order in which they were opened
- frequency of viewing individual web pages of the website
- from which other website the User arrived at this website (only in case of a website on which a link pointing to this website is placed)
- determination of the geographical location of the User visiting the website (based on data from the internet service provider, only approximate data regarding the location of the device used for browsing)
- start time of browsing the website
- time of leaving the website (completion of browsing)
- duration of browsing the website.
4.4. Purpose of data processing: The use of "cookies" and log files is necessary for the user-friendly and secure operation of the website. The purpose of the data processing carried out through these is to ensure the secure and user-friendly operation of the website for the affected User. The purpose of processing anonymous data collected regarding website use is the development of our service and our website in order to make it more efficient.
4.5. Duration of data processing: The Data Controller processes part of the data for the duration of the browsing session, and stores certain data - for varying periods, but for a maximum of 2 years.
4.6. Method of data storage: In distinct data processing lists within the IT system of the Data Controller.
4.7. The User can read further information on the process of information technology data processing from the notice accessible via the pop-up warning banner appearing upon starting browsing the website, as well as from the notice accessible by clicking on the text "Tájékoztató „sütik" alkalmazásáról" on the website.
5. Data Processing Related to Receiving and Answering Messages
5.1. Categories of data subjects: Users sending a message to the Data Controller by using the messaging interface accessible from the "Kapcsolat" menu item of the website, or via e-mail using the e-mail address(es) indicated on the website.
5.2. Legal basis for data processing: consent of the User pursuant to Article 6(1)(a) of the GDPR.
5.3. Definition of the scope of processed data: For the User sending the e-mail message: surname, first name, e-mail address, telephone number, any additional data provided by the User in the message.
5.4. Purpose of data processing: Enabling message exchange with the Data Controller for the User.
5.5. Duration of data processing: Lasts until the message is answered or until the User's request is fulfilled.
5.6. Method of data storage: On a distinct data processing list in the Data Controller's IT system, until the end of the information exchange period.
6. Data Processing Related to Sending Newsletters
6.1. Data subject: the User who subscribes by filling out the newsletter subscription fields on the website.
6.2. Legal basis for data processing: consent of the User pursuant to Article 6(1)(a) of the GDPR and Section 6(1) and (2) of the Grt.
6.3. In addition to sending useful information, the newsletter service also aims at direct marketing by the Data Controller.
6.4. Definition of the scope of processed data: name, e-mail address.
6.5. Purpose of data processing: sending newsletters by the Data Controller to the User via e-mail.
6.6. Duration of data processing: The Data Controller processes data handled for the purpose of sending newsletters until the withdrawal of the User's consent to this effect (unsubscription), or until the deletion of the data upon the User's request.
6.7. Method of data storage: On a distinct data processing list in the Data Controller's IT system.
7. Data Processing Without the Data Subject's Further Separate Consent, or Following the Withdrawal of Consent
7.1. Data collected with the consent of the affected User may be processed by the Data Controller without the affected User's further separate consent, or following the withdrawal of consent, on the basis of Article 6(1) of the GDPR as follows.
7.2. If the collection of personal data took place with the consent of the affected User, the Data Controller may process the collected data, in the absence of a statutory provision to the contrary, without the affected User's further separate consent, as well as following the withdrawal of the affected User's consent, in the following cases:
- the processing is necessary for compliance with a legal obligation to which the controller is subject;
- the processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
8. Further Possible Legal Bases for Data Processing - Independent of the User's Consent
8.1. Furthermore, the legal basis for data processing in the relevant cases is processing necessary for compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR.
8.2. Under Article 6(1)(d) and (f) of the GDPR, we also inform you that the Data Controller may process the User's personal data without their consent if processing is necessary in order to protect the vital interests of the User or of another natural person, or if processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
8.3. Pursuant to Section 13/A of Act CVIII of 2001 on certain issues of electronic commerce services and information society services (hereinafter: Ekertv.), the Data Controller further informs the User of the following.
9. Data Processing Records
9.1. Records of newsletter subscribers: contains the data listed in Section 6 of Users who subscribe to the newsletter.
9.2. Personal data breach records: records of unlawful processing or handling of personal data and measures taken to remediate them.
9.3. To achieve the data processing purposes - as described above - the Data Controller stores the data in its IT system in the form of separate lists, in databases separated by data processing purposes.
10. Data Transfer
10.1. The Data Controller does not transfer Users' data to third parties.
10.2. The Data Controller transfers data to authorities exclusively in the case of a legal obligation.
11. Engagement of Data Processors
The Data Controller engages the following business entities as data processors.
11.1. Hosting Provider
11.1.1. Categories of data subjects: Users visiting the website, regardless of the use of services provided by the website.
11.1.2. The Data Controller engages as data processor
Infobex Informatikai és Szolgáltató Korlátolt Felelősségű Társaság
abbreviated name: Infobex Kft
company registration number: 03-09-123778
tax number: 23747405-2-03
registered office: 6500 Baja, Szegedi út 121. fszt. 2.
e-mail: info@infobex.hu
website: https://infobex.hu
11.1.3-11.1.6. The purpose of data processing is to ensure the operation of the website in an information technology sense.
11.2. Data Processing Related to Newsletter Sending
11.2.2. The Data Controller engages as data processor
E.N.S. Informatikai és Rendszerintegrációs Zártkörűen Működő Részvénytársaság
Abbreviated name: E.N.S. Zrt.
Company registration number: 01-10-046975
Tax number: 14032868-2-42
Registered office: 1106 Budapest, Fehér út 10. 2. ép. 2. em.
E-mail: kapcsolat@webgalamb.hu
Website: https://www.webgalamb.hu/
11.3. Hosting Service for the Mail Service
11.3.2. The Data Controller engages Infobex Kft (see Section 11.1.2) as data processor.
11.4. E-mail Forwarding of Contact Form Messages (Transactional E-mail Service)
11.4.1. Categories of data subjects: Users using the messaging form accessible from the "Kapcsolat" menu item of the website.
11.4.2. The Data Controller engages as data processor
Resend, Inc.
Registered office: 2261 Market Street #5039, San Francisco, CA 94114, Amerikai Egyesült Államok
Website: https://resend.com
Privacy policy: https://resend.com/legal/privacy-policy
11.4.3. The purpose of data processing: forwarding the data provided by the User on the contact form (surname, first name, e-mail address, telephone number, message content) via e-mail to the Data Controller for the purpose of replying.
11.4.4. Duration of data processing: the time technically necessary for forwarding and delivering the e-mail, and the period stored in the service provider's own operational logs - specified in Resend's privacy policy.
11.4.5. Data transfer to a third country: Resend, Inc. provides its service in the United States of America (in a third country). The legal basis for the data transfer is the Standard Contractual Clauses (SCC) approved by the European Commission pursuant to Article 46(2)(c) of the GDPR, which form part of the Data Processing Agreement (DPA) provided by Resend, Inc. Provided that Resend, Inc. holds an EU-US Data Privacy Framework (DPF) certification, data transfer also takes place on the basis of an adequacy decision pursuant to Article 45 of the GDPR.
11.5. Data processing for other purposes does not take place.
11.6. The Data Processors have no interest in the business activity of the Data Controller.
11.7. The Data Controller does not engage any data processors other than the Data Processors specified above.
12. Rights of the User Concerning Data Processing
12.1. Right of access: Upon request of the User, the Data Controller provides information on the User's data processed by it, within one month at the latest.
12.2. Right to data portability: The User has the right to receive the personal data concerning them in a structured, machine-readable format.
12.3. Right to rectification: The User may request the rectification of their processed data, which the Data Controller complies with without undue delay, but within one month at the latest.
12.4. Right to restriction of processing: The Data Controller marks the personal data processed by it for the purpose of restricting data processing.
12.5. Right to erasure: The Data Controller erases the personal data if they are no longer necessary, or if the User withdraws their consent.
12.6. Right to object: The User has the right to object at any time to the processing of their personal data based on the legitimate interest of the Data Controller.
12.7. Right to lodge a complaint with a supervisory authority: Pursuant to Article 77 of the GDPR, the User has the right to lodge a complaint with a supervisory authority if they consider that the processing of personal data relating to them infringes the provisions of the GDPR. The supervisory authority in Hungary is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), its contact details can be found in Section 15. The exercise of the right to lodge a complaint shall be without prejudice to the data subject's other administrative or judicial remedies.
12.8. Right to withdraw consent: The User has the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
12/A. Data Protection Officer
Based on the provisions of Article 37 of the GDPR, the Data Controller is not obliged to appoint a data protection officer (DPO), because:
- it is not a public authority or a body performing a public task;
- its core activities do not consist of processing operations which require regular and systematic monitoring of data subjects on a large scale;
- its core activities do not extend to processing on a large scale of special categories of personal data pursuant to Article 9 of the GDPR, or personal data relating to criminal convictions and offences pursuant to Article 10.
In data protection matters, the User may contact the Data Controller directly at the e-mail address info@agrider.hu.
13. Fulfillment of User Requests
13.1. The Data Controller provides information and measures as set out in Section 12 free of charge.
13.2. The Data Controller informs the User of action taken on a request without undue delay and at the latest within one month of receipt of the request.
13.3. If the Data Controller does not take action on the request of the affected User, it informs the data subject without delay and at the latest within one month of the reasons for not taking action.
13.4. The User may submit their requests to the Data Controller in any manner that enables their identification.
13.5. The User may send their requests by post to the address 6000 Kecskemét, Kisfái tanya 207. A. épület, or by e-mail to the e-mail address info@agrider.hu.
14. Data Protection, Data Security
14.1. The Data Controller ensures the security of data in the scope of its data processing and handling activities, and ensures the implementation of legislation through technical and organizational measures as well as internal procedural rules.
14.2. The IT system of the Data Controller records the data serving as the basis for traffic measurement from the outset in such a way that they cannot be linked directly to any individual.
14.3. Data processing takes place only to achieve the legitimate purposes specified in this policy, to the extent necessary and proportionate thereto.
14.4. To this end, the Data Controller uses an http protocol with the "https" scheme to access the website.
15. Enforcement of Rights
Data subjects may enforce their legal remedies before a court pursuant to Act V of 2013 on the Civil Code and the GDPR, and may contact the Nemzeti Adatvédelmi és Információszabadság Hatóság:
Nemzeti Adatvédelmi és Információszabadság Hatóság
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Postal address: 1530 Budapest, Pf.: 5.
Telephone: +36 1 391 1400
Fax: +36 1 391 1410
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu/
In the event of choosing the judicial route, the lawsuit - at the choice of the affected User - may also be brought before the regional court competent for the domicile or place of stay of the data subject.
Last updated: 2026.05.05. - Agrider Zrt.