Cookie Policy

This Privacy Notice provides information on the processing of personal data carried out through the use of the www.raking.hu website operated by the Controller – including, in particular, the submission of online quotation requests and the subscription to newsletters via the website.

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”), the Controller hereby provides the following information to the data subjects regarding the processing of their personal data.

1. Data Controller and Hosting Service Provider – Details and Contact Information

1.1. Data Controller details

Name of the Data Controller: RAKING Kft. (hereinafter referred to as the “Data Controller” in this Privacy Notice)

Representative and contact person: Gergő Török, Managing Director

Registered office: 1115 Budapest, Benedikt Ottó utca 3. D. ép. 7. em. 1. ajtó 7. storey 1. door

Company registration number: 01-09-395325

Registering authority: Company Registry Court of Budapest Capital Regional Court

Contact details of the Data Controller:

• Postal address: 1115 Budapest, Benedikt Ottó utca 3. D. ép. 7. em. 1. ajtó 7. storey 1. door
• Telephone number: +36 20 330 90 28
• Email address: info@raking.hu
• Website: www.raking.hu

1.2. Hosting Service Provider details

Hosting Provider: DL ISP SUPPORT Kft.

Registered office: 6000 Kecskemét, Semmelweis utca 1/a.

Tax number: 24886716-2-03

Company registration number: 03-09-127451

E-mail: info@dlisp.hu

1.3. For the purposes of this Privacy Notice:

“personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

“controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

“processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

“recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether or not it is a third party. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

“data subject’s consent” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Based on the above definitions, for the purposes of this Privacy Notice, a data subject is any natural person who visits the www.raking.hu website and submits an online quotation request via the website or subscribes to the newsletter. The provisions of this Privacy Notice do not apply to data relating to non-natural persons.

1.4. General information about cookies

1.4.1. During visits to the www.raking.hu website, the Data Controller uses so-called cookies, which are small data files consisting of letters and numbers. These information packages are sent by the website to your browser in order to store certain settings, facilitate the use of the website, and help collect certain relevant, statistical information about the visitors of the website.

Some cookies do not contain personal information and are not suitable for identifying the individual user. Others, however, contain a unique identifier – a secret, randomly generated sequence of numbers – which is stored on your device and allows for your identification. The operating duration of each cookie is specified in the description of the respective cookie.

1.4.2. In general, three main categories of cookies are distinguished: essential cookies (necessary for the proper functioning of the website), statistical cookies, and marketing cookies.

The legal basis for processing is: the data subject’s consent under Article 6(1)(a) GDPR, in the case of statistical and marketing cookies, and the legitimate interest of ensuring the proper operation of the www.raking.hu website under Article 6(1)(f) GDPR, in the case of essential cookies.

1.4.3. Disabling and deleting cookies

If the data subject does not consent to the placement of cookies, this can be managed through settings in their own browser/mobile application (disabling or withdrawing consent). In such cases, certain services may be limited or unavailable. Further information on deleting cookies can be found at the following links:

• Google Chrome: https://support.google.com/chrome/answer/95647
• Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Microsoft Internet Explorer: http://windows.microsoft.com/en-us/internet-explorer/delete-manage-cookies#ie=ie-11
• Microsoft Edge: https://support.microsoft.com/hu-hu/help/4027947/microsoft-edge-delete-cookies
• Mozilla: https://support.mozilla.org/hu/kb/weboldalak-altal-elhelyezett-sutik-torlese-szamito
• Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

2. Information on data processing

2.1. The legal basis for processing optional cookies is Article 6(1)(a) GDPR, according to which the data subject has given consent for their personal data to be processed for one or more specific purposes. By clicking the “I Consent” button in response to the cookie consent prompt on the www.raking.hu website, the visitor consents, on the basis of this Notice, to the Data Controller’s processing of their personal data specified below for the purposes indicated below, where the legal basis is consent.

2.2. Purpose of processing: Processing of user data related to the use of the www.raking.hu website. Collection of information on how visitors use the Data Controller’s website.

2.3. Categories of personal data processed

2.3.1. The Data Controller uses cookies strictly necessary for the operation of the www.raking.hu website. These cookies are indispensable for the proper functioning of the website, collecting information on whether the interface operates correctly and whether any errors occur in operation. Functional cookies ensure the proper display of the website and remember, for example, settings previously chosen by the data subject (e.g. language preferences).

2.3.2. Statistical cookies

For the purpose of developing the www.raking.hu website and improving the experience of its visitors, the Data Controller also uses cookies that enable the collection of information on how visitors use the website. These cookies cannot personally identify the website visitor; they collect information such as which parts of the website the visitor clicked on and how long the duration of each session was.

Such performance cookies include Google Analytics cookies [https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage].

On the www.raking.hu website, statistical cookies provided by Google LLC – as an external service provider – are used. These do not contain the personal data of website visitors; they only identify the browser software used by the visitor.

The www.raking.hu website contains third-party cookies but does not use targeted cookies. Accordingly:

– Third-party cookies: enable the sharing of content from another controller (e.g., social media platforms, Google Analytics, Adobe Marketing Cloud, etc.) and may send information to the third-party controller, which may later use such information to display targeted advertisements on other websites;

– Targeted cookies: enable the display of personalised advertisements on the web interface, tailored to the data subject’s interests (e.g., based on previous searches or selected menu items). On the website operated by the Data Controller, advertisements are related solely to the services provided by the Data Controller.

Cookies used	Purpose	Data retention period
_ga	to distinguish users	2 years
_ga_*	to preserve the state of the session	2 years
_gid	to assist in traffic analysis and improve user experience	1 day
_gat_gtag_UA_*	to regulate the rate of data collection requests, which plays a role in maintaining the effectiveness and performance of Google Analytics	1 minute

Google Analytics cookie: Google Analytics is Google’s analytics tool that helps website and application owners gain a clearer picture of their visitors’ activities. The service may use cookies to collect information and prepare statistical reports on website usage without identifying individual visitors for Google. The primary cookie used by Google Analytics is the “__ga” cookie. In addition to reports generated from website usage statistics, Google Analytics – together with certain advertising cookies mentioned above – may also be used to display more relevant advertisements in Google products (such as Google Search) and across the internet.

Cookies for improving user experience: These cookies collect information about how the user interacts with the website, for example, which pages are visited most frequently or what error messages the website generates. These cookies do not collect information that identifies the visitor; they operate exclusively with general, anonymous information. The data obtained from them are used to improve the performance of the website. The lifespan of this type of cookie is limited solely to the duration of the session.

Facebook pixel (Facebook cookie): The Facebook Pixel is a piece of code that allows reports to be generated on conversions, audiences to be built, and detailed analytics to be provided to the website owner about how visitors use the site. With the help of the Facebook Pixel, personalised offers and advertisements can be displayed to website visitors on the Facebook platform [Facebook’s privacy policy is available here: https://www.facebook.com/privacy/explanation].

Stored device data: IP address, type and language of browser/operating system, start and end time of website visit. These are required to facilitate the usability and processes of the website. Data retention period: 1 year.

2.4. Source of data processed: directly from the data subject.

2.5. Categories of recipients:

– Management of RAKING Kft.

– Processor: DL ISP SUPPORT Kft. (registered office: 6000 Kecskemét, Semmelweis utca 1/a, tax number: 24886716-2-03, company registration number: 03-09-127451, email: info@dlisp.hu), in connection with the operation of the website. Scope of data accessed: cookies used on the website, IP address, type and language of browser or operating system, start and end time of website visit.

2.6. Description of technical and organisational measures to ensure data security:

The Data Controller undertakes to ensure the security of the personal data it processes as follows:

– Administrative and technical protection measures [to ensure the security of IT systems, the Data Controller protects them with a firewall and uses antivirus and anti-malware software to prevent both external and internal data loss];

– Personal security measures;

– Training and awareness-raising.

2.7. Automated decision-making, profiling: none.

3. Rights of the Data Subject in relation to data processing

3.1. The Data Subject may request from the Data Controller

a) information on the processing of their personal data [Articles 13 and 14 GDPR],

b) access to their personal data [Article 15 GDPR],

c) rectification or supplementation of their personal data [Article 16 GDPR],

d) erasure or restriction (blocking) of their personal data – except where processing is mandatory [Articles 17 and 18 GDPR],

e) the right to data portability [Article 20 GDPR],

f) the right to object to the processing of their personal data [Article 21 GDPR],

g) the right to withdraw their consent to data processing at any time, without justification [Article 17(1)(b) GDPR], and

h) the right to seek legal remedy against the Data Controller’s actions or decisions.

The Data Subject may submit their request in writing to the Data Controller as set out in Section 3.2. The Data Controller shall fulfil the Data Subject’s lawful request within a maximum of one month and shall notify the Data Subject thereof by email or by postal letter sent to the contact details provided by the Data Subject.

a) Right to information

Upon specific request, and also proactively for the purpose of raising data protection awareness, the Data Controller endeavours to provide you with comprehensive information on various aspects of data processing in a concise, transparent, intelligible and easily accessible form.

If you have any questions relating to data processing, a request for personalised information may be submitted to the Data Controller in writing, in accordance with Section 3.2.

b) Right of access

Upon request, the Data Controller will prepare a personalised report for you on the personal data it processes about you. You may request from the Data Controller a complete query of all personal data relating to you, or you may request data provision in relation to specific categories of data. You may obtain information in particular about the specific purpose or legal basis of processing (by data category), and you may find out whether your personal data have been disclosed to third parties (processors). In the event that personal data are transferred outside the territory of the European Union or to an international organisation, you may also receive separate information on the appropriate safeguards in place to ensure the confidentiality of such data.

The Data Controller will normally fulfil the first data provision request free of charge; however, it reserves the right to charge an administrative fee of HUF 5,000 for fulfilling requests that are manifestly unfounded, excessive, or made in bad faith. Requests of this nature may be submitted to the Data Controller in writing in accordance with Section 3.2.

c) Right to rectification

The Data Controller strives to ensure that your data are always up to date and complete, and to this end relies on your cooperation. We kindly request that you notify us of any missing or inaccurate data. We undertake to assess your rectification requests without delay and as a matter of priority. Such requests may be submitted to the Data Controller in writing in accordance with Section 3.2.

d) Right to erasure and restriction of processing

Upon a duly justified request submitted in writing in accordance with Section 3.2, the Data Controller will promptly erase your personal data if:

• the purpose of processing the specified personal data has ceased to exist,
• you withdraw your consent for the specified personal data and the processing cannot be based on another legal ground,
• it is established, as a result of an internal investigation or by a decision of a public authority or court, that the Data Controller has processed your personal data unlawfully,
• your personal data must be erased pursuant to national or EU legal provisions, or
• you have raised a well-founded objection to the processing and there is no overriding legitimate reason for continuing the processing.

The Data Controller nevertheless reserves the right to reject your request for the erasure of personal data even if one of the above alternative conditions is met, where the lawfulness of processing can still be ensured under applicable national or EU legislation. In such cases, the Data Controller will provide you with detailed information on the reasons for refusing your request.

Upon a duly justified request submitted in writing in accordance with Section 3.2, the Data Controller will restrict the processing of your personal data to storage only, if:

• due to the unlawfulness of processing, you could also request the erasure of your personal data,
• the retention period for processing has expired, and without a specific request from you the personal data would otherwise be erased,
• the accuracy or completeness of the personal data is contested, or
• you have objected to the processing.

In the latter two cases, the restriction will remain in effect until the completion of the relevant internal investigation and/or the conclusion of the competent authority and/or court proceedings. The Data Controller will always inform you in writing, in advance, of the lifting of the restriction on processing.

e) Right to data portability

The Data Controller grants you the right to receive your personal data processed by it in a structured, commonly used and machine-readable format, and to transmit those data to another controller, provided that this does not result in an unjustified and disproportionate prejudice to the legitimate interests (trade secrets) of the Data Controller. Such a request may be submitted to the Data Controller in writing in accordance with Section 3.2.

f) Right to object

The Data Controller also provides you with the opportunity to object to the processing of your personal data. Your objection will only result in the termination of processing if the processing is carried out on the basis of the Data Controller’s legitimate interest or the public authority powers vested in it. Such a request may be submitted to the Data Controller in writing in accordance with Section 3.2.

In these two cases, the Data Controller nevertheless reserves the right to disregard your objection—while providing you with appropriate information and ensuring the possibility of legal remedy—if the processing can be justified by compelling legitimate grounds that override your freedoms and rights (e.g., property protection) or if it is necessary for the enforcement of the Data Controller’s contractual or non-contractual claims.

g) Withdrawal of consent

Please note that if the processing of your personal data by the Data Controller is based on your consent, you have the right to withdraw that consent at any time, thereby requesting the termination of processing. The withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal.

h) Right to legal remedy

Please be informed that if you have a complaint regarding the data processing carried out by the Data Controller, you may exercise various legal remedies to seek redress for any infringement of your rights. If a dispute concerning data processing is not resolved satisfactorily within the organisational framework of the Data Controller, you may, in accordance with the legal options available to you, initiate court proceedings against the Data Controller or lodge a complaint with the competent authority: 1055 Budapest, Falk Miksa utca 9-11., Postal address: 1363 Budapest, Pf.: 9., Website: http://naih.hu; Postal address: 1363 Budapest, Pf.: 9.; Telephone: +36-1-391-1400; Fax: +36-1-391-1410; Email address: ugyfelszolgalat@naih.hu)

3.2. Contacting the Data Controller

3.2.1. To exercise any of your rights relating to data processing as set out in Section 3.1, to request information on data processing, or to submit an objection or complaint regarding data processing, you may do so in writing—by letter or email—using the Data Controller’s contact details provided in Section 1.

Upon receipt of your written request, the Data Controller will, without undue delay and within the time limits prescribed by applicable legislation, investigate the matter, take appropriate action, and provide you with information on the matter. If necessary—due to the complexity of the request or the number of requests—this deadline may be extended as permitted by law.

3.2.2. If the data subject has submitted the request electronically, the Data Controller will, where possible, provide the information electronically, unless the data subject requests otherwise.

If the Data Controller does not take action on the data subject’s request without undue delay, and in any event within the statutory deadline, it shall inform the data subject of the reasons for not taking action or for refusing to comply with the request, as well as of the possibility of initiating court proceedings or lodging a complaint with a supervisory authority as described above.

The Data Controller reserves the right to unilaterally amend this Privacy Notice with future effect. Data subjects will be informed of any changes via the Data Controller’s website. This Privacy Notice has been prepared in Hungarian, German, and English; in the event of any discrepancy, the Hungarian version shall prevail.

Effective as of: 2025. 1th august from