Privacy Notice

Effective date: 6 July 2026

1. Data Controller

Company name: Tűzvédelmi és Munkavédelmi Mérnökiroda Korlátolt Felelősségű Társaság
Registered office: 1212 Budapest, XXI., Szent István út 59., Hungary
Company registration number: 01-09-443268
Tax number: 32800218-2-43
E-mail: info@tuzkempro.hu

2. The User's Own Role as Data Controller

Within the Tuzkempro service, the User (a professional carrying out inspections, surveys or audits) enters their own clients' data, sites and inspection documents into the system. With respect to this data, the User acts as an independent data controller; the Provider acts as a data processor on the User's behalf, solely for the purpose of delivering the Service.

3. Categories of Data Processed

Registration data: e-mail address, name.
Profile data: title, your own company details, signature (if provided).
Work data (entered by the User): client companies, sites, site inspections, findings, photos, inspection reports, documents.
Log data: time of login, IP address (for security purposes, retained for a limited period).
Payment and billing data: card details are entered and stored exclusively within the systems of the payment provider (Paddle). The Provider NEVER, at any time, has access to the full card number or the security code. Billing data (name, company, tax number, country, e-mail) is handled by Paddle as Merchant of Record for the purpose of issuing the invoice.

4. Purpose and Legal Basis of Processing

Purpose: providing the Service, storing the User's data securely, troubleshooting, and billing.
Legal basis: Article 6(1)(b) GDPR — performance of a contract, and the consent of the data subject.

5. Data Storage Location and Security

The data is handled by a trusted cloud infrastructure provider (Google Ireland Ltd. / Google LLC – Google Cloud Platform / Firebase), under data processing terms that comply with the GDPR. Some data may also be processed outside the EU (for example, in the United States); any such transfer takes place under the Standard Contractual Clauses (SCC) approved by the European Commission, or under the EU–US Data Privacy Framework, with appropriate safeguards. Transfers are protected by SSL/TLS encryption. Every User has their own isolated workspace — other Users CANNOT see your data.

6. Data Retention Period

We retain the work data entered by the User for as long as the User actively uses their account. When the account is deleted, all personal data is permanently erased within 30 days from every copy of the system, including backups.

7. Data Processors

The following data processors take part in delivering the Service:

Google LLC / Google Ireland Ltd. — cloud infrastructure (Google Cloud Platform; EU and international data centres, with GDPR-compliant safeguards).
Firebase (Google) — authentication and database services.
Paddle.com Market Limited (Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom) — online payment, subscription management and billing as Merchant of Record, and fraud prevention. On Paddle's data processing: Paddle Privacy Notice.
Rackhost Zrt. — web hosting (for the marketing website).

8. Rights of the Data Subject

Access to their own data.
Request rectification.
Request erasure (the right to be forgotten).
Right to data portability (CSV/JSON export).
Object to the processing.
Lodge a complaint with the supervisory authority. In Hungary: the National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., naih.hu); in other EU Member States, with the local data protection authority.

9. Cookies

The website uses cookies that are strictly necessary (technical) for its operation. During the payment process, Paddle may use its own cookies and technical identifiers to carry out the payment and prevent fraud. We place marketing tracking cookies only with the User's consent.

10. Contact

For any data protection questions, you can reach us at info@tuzkempro.hu.

This notice has been prepared to the best of the Provider's current knowledge. Before the international launch of the paid service, the final version, countersigned by a lawyer, will be published.