Privacy Notice

Effective date: 9 October 2026 (previous version: 6 July 2026)

1. Data Controller

• Company name: Tűzvédelmi és Munkavédelmi Mérnökiroda Korlátolt Felelősségű Társaság
• Registered office: 1212 Budapest, XXI., Szent István út 59., Hungary
• Company registration number: 01-09-443268
• Tax number: 32800218-2-43
• E-mail: info@tuzkempro.hu

2. The User's Own Role as Data Controller

Within the Tuzkempro service, the User (a professional carrying out inspections, surveys or audits) enters their own clients' data, sites and inspection documents into the system. With respect to this data, the User acts as an independent data controller; the Provider acts as a data processor on the User's behalf, solely for the purpose of delivering the Service.

3. Categories of Data Processed

• Registration data: e-mail address, name.
• Profile data: title, your own company details, signature (if provided).
• Work data (entered by the User): client companies, sites, site inspections, findings, photos, inspection reports, documents. Location (GPS) data is removed from photos when they are uploaded.
• Log data: time of login, IP address (for security purposes, retained for a limited period).
• Payment and billing data: card details are entered and stored exclusively within the systems of the payment provider (Paddle). The Provider NEVER, at any time, has access to the full card number or the security code. Billing data (name, company, tax number, country, e-mail) is handled by Paddle as Merchant of Record for the purpose of issuing the invoice.

4. Purpose and Legal Basis of Processing

• Purpose: providing the Service, storing the User's data securely, troubleshooting, and billing.
• Legal basis: Article 6(1)(b) GDPR — performance of a contract, and the consent of the data subject.

5. Data Storage Location and Security

The database and the uploaded files are stored in the European Union, in the Frankfurt region of Google Cloud, under Google's GDPR-compliant data processing terms. Text that the User explicitly sends to the AI features, and the access of our development and operations AI assistant described in section 7, are processed in the United States under the Standard Contractual Clauses approved by the European Commission. All connections are encrypted with TLS. Every User has their own isolated workspace — other Users CANNOT see your data.

6. Data Retention Period

We retain the work data entered by the User for as long as the User has an account. When the User deletes the account, it is disabled immediately and the data can still be restored for 30 days; after that it is permanently deleted from the live system. The daily database backup is kept for 7 days, so deleted data disappears from the backups as well within 37 days at the latest. Deleted files can be restored for 7 days.

7. Data Processors

The following data processors take part in delivering the Service:

• Google Ireland Ltd. / Google LLC — cloud infrastructure, database, file storage and authentication (Google Cloud Platform, Firebase); data stored in the EU, Frankfurt.
• Anthropic PBC, United States — AI features: legal reference suggestions, chatbot and in-app help assistant; only the text the User explicitly sends. In addition, our development and operations AI assistant, Anthropic's Claude model, may access the necessary data and files under the supervision of our administrator when troubleshooting, or when the User asks us to take over their data.
• Sendinblue SAS (Brevo), France — sending e-mails, for example reminders and training invitations.
• Cloudflare, Inc. — storage of training materials, in the EU.
• Paddle.com Market Limited (Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom) — online payment, subscription management and billing as Merchant of Record, and fraud prevention. On Paddle's data processing: Paddle Privacy Notice.
• GitHub, Inc., United States, under the EU–US Data Privacy Framework — storage of the source code and of the Provider's internal backups for emergency recovery, in a private repository.
• Microsoft Ireland Operations Ltd. — storage of the Provider's documents; files handed over by the User for data import are received here; data stored in Hungary.
• Rackhost Zrt. — web hosting for the marketing website.

8. Rights of the Data Subject

• Access to their own data.
• Request rectification.
• Request erasure (the right to be forgotten).
• Right to data portability: on request, we provide your data in machine-readable JSON format.
• Object to the processing.
• Lodge a complaint with the supervisory authority. In Hungary: the National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., naih.hu); in other EU Member States, with the local data protection authority.

9. Cookies

The website uses cookies that are strictly necessary (technical) for its operation. During the payment process, Paddle may use its own cookies and technical identifiers to carry out the payment and prevent fraud. We place marketing tracking cookies only with the User's consent.

10. Contact

For any data protection questions, you can reach us at info@tuzkempro.hu.