Privacy notice
This notice describes how the Veridyn product passport service (hereinafter: the Service) processes personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 (the Hungarian Info Act).
1. The data controller
Name: [CÉGNÉV]
Registered seat: [SZÉKHELY]
Company registration / registry number: [CÉGJEGYZÉKSZÁM]
Tax number: [ADÓSZÁM]
Representative: [KÉPVISELŐ]
Email: info@veridyn.eu
Phone: [TELEFON]
Appointing a data protection officer is not mandatory; you can reach us at the email address above with any data protection questions.
2. Scope of this notice
This notice applies to visitors of the veridyn.eu website, registered users and those who contact us. As regards the data that users upload into product passports – to the extent it contains personal data – the user is typically the data controller, while the Service acts as a data processor (see also the Terms of Service).
3. Data processed, purposes and legal bases
| Data category | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account data: name / company name, email address, password (stored encrypted, in "hash" form) | Creating an account, logging in, providing the Service | Performance of a contract – GDPR Article 6(1)(b) | For the duration of the account, and [e.g. 30 days] after deletion |
| Product passport data (entered by the user) | Producing public, multilingual product passports and QR codes | Performance of a contract – Article 6(1)(b) | Until the product / account is deleted |
| Contact form: name, email, company, message | Responding to the enquiry | Legitimate interest – Article 6(1)(f) | [pl. 1 év] |
| Password reset token | Securely resetting the password | Performance of a contract / legitimate interest | 1 hour (single use) |
| Technical log (timestamp, possibly IP address) | Operation, troubleshooting, abuse prevention | Legitimate interest – Article 6(1)(f) | [pl. 6 hónap] |
The retention periods indicated are guidance; the data controller finalises the [...] fields in line with its actual practice.
4. Data processors
We use the following data processors to operate the Service:
- Hosting provider: [TÁRHELYSZOLGÁLTATÓ NEVE ÉS SZÉKHELYE] – hosting of the website and the database.
- Email delivery: smtp2go (operated by Help Monkey Limited; EU delivery server: mail-eu.smtp2go.com) – delivery of transactional emails (welcome, password reset, notifications).
5. Data transfers, third countries
We transfer personal data to third parties only through the data processors listed above, for the stated purposes. Where a data processor processes data outside the EEA, the transfer takes place subject to appropriate safeguards (e.g. the European Commission's Standard Contractual Clauses, SCC). We do not disclose or sell data for marketing purposes.
6. Rights of the data subject
The data subject has the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to processing based on legitimate interest. Where processing is based on consent, the consent may be withdrawn at any time (this does not affect the lawfulness of processing prior to the withdrawal).
You can exercise your rights at info@veridyn.eu; we will fulfil your request without undue delay, and no later than within 1 month.
7. Cookies
The website uses cookies necessary for its operation. Details in the Cookie Policy.
8. Data security
We store passwords solely in a secure, one-way "hash" form; communication is encrypted over HTTPS; the interface is protected by CSRF and session safeguards. We access the data only to the extent necessary to perform the task.
9. Legal remedies
You may lodge a complaint about data processing with the supervisory authority:
National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11. · naih.hu · ugyfelszolgalat@naih.hu
If your rights are infringed, you may also turn to a court.
10. Amendment of this notice
We may amend this notice as needed; the version in force at any given time is available on this page, with the date of the update.