Legal
Privacy Policy
Last updated 21 August 2026.
1. Controller
For this website and related enquiries, the controller is the company below.
- Company
- VRX IT Services Korlátolt Felelősségű Társaság
- Short name
- VRX IT Services Kft.
- Registered seat
- 2051 Biatorbágy, Kőris utca 2. A. ép. 1. em. 1. ajtó
- Company registration no.
- 13-09-234832
- Company court
- Company Registry Court of the Budapest Environs Regional Court
- Tax number
- 32591226-2-13
- Authorised representative
- Fedor Bence, managing director
- Contact
- info@vrxit.com
- Website
- https://vrxit.com
2. Applicable law
Personal data are processed under Regulation (EU) 2016/679 (GDPR), Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information, Act CVIII of 2001 on electronic commerce and information society services, and the relevant rules of Act V of 2013 on the Civil Code. An EU representative under Article 27 GDPR is not appointed, because the controller is established in the European Union.
3. Scope
This Privacy Policy covers visits to https://vrxit.com, use of the contact form, and messages sent to info@vrxit.com. Client projects, employment, or a separate contract may be covered by additional written information.
This website is not directed at children. We do not knowingly process data of anyone under 16. If such data come to our attention, we delete them.
4. Contact form and email
If you write through the form or by email, we may process: name, email address, company name, phone number, selected topic, message text, and the time of sending. The form includes a hidden field used to filter automated submissions. People should leave that field empty. If it is filled, the submission is not processed.
Required fields: name, email address, and message. We cannot answer a request without them. Company name, phone number, and topic are optional.
Purpose: to receive, identify, and answer the enquiry, to prepare a conversation or proposal if you ask for one, and to keep a record of the exchange.
Legal basis: Article 6(1)(b) GDPR where the enquiry is a step prior to a contract at your request. If the contact is not aimed at a contract, the legal basis is Article 6(1)(f) GDPR. Legitimate interest: answering professional enquiries and running the company lawfully. A balancing test has been carried out. You may object to processing based on Article 6(1)(f).
Retention: 12 months after the conversation ends. If a contract or invoice follows, accounting records are kept for 8 years under Act C of 2000 on Accounting. In a dispute or official procedure, data are kept for as long as needed to establish, exercise, or defend legal claims.
5. Website visits and logs
The hosting provider may keep technical logs to run the service securely. These may include IP address, timestamp, requested URL, HTTP status, browser and device identifier (user agent), and referring page. Purpose: operating the website, detecting abuse and errors, and information security. Legal basis: Article 6(1)(f) GDPR. Legitimate interest: availability of the service and protection of the systems. Retention: the host’s ordinary operating period, typically up to 30 days, unless a longer period is justified for security or legal reasons.
6. Cookies
This website does not use marketing, analytics, social media, or profiling cookies. We do not place third-party tracking code. For that reason we do not display a cookie consent bar. If we later introduce cookies that are not strictly necessary, we will update this Privacy Policy and ask for consent in line with Act C of 2003, the GDPR, and the guidance of the supervisory authority.
7. Recipients
Data may be disclosed to the following recipients, only as needed for their task.
- The person authorised to represent the company, and staff or contractors who help answer the enquiry, under a duty of confidentiality.
- Hosting provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States. Website: https://vercel.com. Privacy Policy: https://vercel.com/legal/privacy-policy. Vercel runs the website and may process requests, logs, and the contact API call.
- Email delivery: Resend (https://resend.com), region eu-west-1 (Ireland). It sends the form content by email to info@vrxit.com. Privacy Policy: https://resend.com/legal/privacy-policy.
- A court, authority, or instructed legal counsel where the law requires it.
The LinkedIn icon is an outbound link. LinkedIn Ireland Unlimited Company acts as an independent controller if you open that link. We do not pass form data to LinkedIn.
8. Transfers outside the EEA
Vercel Inc. is established in the United States and may process hosting data there. Transfers to Vercel Inc. follow Chapter V GDPR: where available, an adequacy decision of the European Commission (including the EU-US Data Privacy Framework, if the recipient is certified), otherwise appropriate safeguards under Article 46 GDPR, in particular the Commission’s standard contractual clauses. Email sending through Resend is configured in the European Union (Ireland). Vercel publishes a data processing addendum. On request we will describe the safeguards in place. Write to info@vrxit.com.
9. Automated decision-making
We do not use automated decision-making that produces legal effects under Article 22 GDPR, and we do not profile visitors for marketing.
10. Security
Data are transmitted over HTTPS. Access is limited to people who need it for their task. The hosting infrastructure uses industry measures such as isolated execution, encryption in transit, and access logging. No internet service can guarantee absolute security. Please do not send passwords or special-category data through the form.
11. Your rights
Under Chapter III GDPR and Act CXII of 2011 you may:
- request information and access to your data (Article 15 GDPR);
- request rectification of inaccurate data (Article 16);
- request erasure in the cases set out in Article 17;
- request restriction of processing (Article 18);
- exercise data portability where the conditions are met (Article 20);
- object to processing based on Article 6(1)(f) (Article 21);
- lodge a complaint with the supervisory authority. A complaint does not affect your right to go to court.
To exercise these rights, write a clear request to info@vrxit.com. We must identify the requester. We reply within one month of receipt, extendable by two further months where Article 12(3) GDPR allows it.
- Authority
- National Authority for Data Protection and Freedom of Information (NAIH)
- Address
- 1055 Budapest, Falk Miksa utca 9-11.
- PO Box
- 1363 Budapest, Pf. 9.
- Phone
- +36 (1) 391 1400
- Website
- https://www.naih.hu
12. Changes
We update this Privacy Policy when the law or our processing changes. The current text is always on this page. The date at the top is the date of the latest version.
