Privacy notice

Controller: BiaDent Egészségügyi Szolgáltató Kft. Registered office: Ady Endre u. 7, 2051 Biatorbágy. Tax number: 23953260-1-13. Dietitian: Ágh-Bíróné Fodor Cecilia. Email: fodorcili@gmail.com. Telephone: +36 20 941 7959. Website: https://fodorceciliadietetika.hu.

The controller has not appointed a data protection officer. Privacy enquiries may be sent to the email address above.

This notice covers processing related to visiting the website, using its contact interface, email and telephone enquiries, and external services made available through the website. Separate information may apply to subsequent processing connected with an actual dietary or healthcare service.

Personal data is processed lawfully, fairly and transparently, for specified purposes, limited to what is necessary and retained only as long as required. The controller takes reasonable steps to ensure accuracy, confidentiality, integrity and appropriate security.

The website operates no user database, registration system, web mailbox or server-side form processor. Information entered into the form fields exists temporarily and solely in the visitor’s browser. The website does not submit or save that information and does not make it available to the controller.

The Send message button creates an email draft on the visitor’s device and attempts to open the visitor’s default email application through a mailto link. A message is transmitted only if the visitor sends it from that email application.

When the Copy function is used, the draft is placed on the visitor’s own device clipboard. The website does not retain or subsequently read that clipboard content. The hidden honeypot field performs local spam filtering and sends no data to an external service.

Data subjects are natural persons who contact the controller by email, telephone or an email prepared through the website.

Data processed may include the person’s name, email address, optional telephone number, subject and content of the enquiry, date and time of communication, and other information necessary to respond or arrange an appointment. Telephone calls are not recorded.

The purposes are to identify and answer the enquiry, maintain contact, arrange an appointment, and take steps at the data subject’s request in preparation for a dietary service or contract.

Depending on the nature of the enquiry, the legal basis is consent under Article 6(1)(a) GDPR or steps taken at the data subject’s request before entering into a contract under Article 6(1)(b) GDPR. Providing information is voluntary; however, without a name and at least one usable contact method, the enquiry may not be answered or may be answered only to a limited extent.

An enquiry may contain information about health, diagnosis, treatment, food allergy, illness or diet. Such information may constitute special-category personal data under Article 9 GDPR. The controller processes it only on the basis of the data subject’s explicit consent pursuant to Article 9(2)(a) GDPR.

By selecting the checkbox in the contact interface, the data subject explicitly consents to the processing of health data they voluntarily include, insofar as necessary to answer the enquiry and prepare the service. Refusing consent causes no disadvantage; in that event, please do not include health data.

For an initial enquiry, please do not send full medical records, test results or health information exceeding what is necessary. If a professional healthcare service begins, further processing may be governed by applicable sector-specific Hungarian healthcare legislation and a separate notice.

The website does not retain form-field contents. An email actually sent by the data subject is delivered to the recipient’s electronic mailbox.

Where no service follows and no matter remains pending, contact details and correspondence are retained for no longer than 12 months after the enquiry is closed, after which they are deleted. Earlier deletion may occur following withdrawal of consent or a valid erasure request.

If a contract, dietary service or healthcare relationship is established, contractual, accounting, professional and healthcare documentation may be retained for the period required by the legislation applicable to each document. Information necessary for a legal claim may be retained until the relevant limitation period expires.

Personal data is primarily accessible to the controller. Access is provided only to persons and service providers necessary for the stated purposes.

Electronic email services are provided by Google. In the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google’s own privacy terms also apply to the transmission and storage of sent messages: https://policies.google.com/privacy.

Where arranging or providing a service requires the involvement of a clinic, only necessary information may be disclosed to that clinic. A clinic may act as an independent controller within its own activities, governed by its own privacy notice.

Personal data is disclosed to a public authority, court or other entitled body only where required by law or a valid official request. The controller does not sell personal data, disclose it for advertising, or carry out automated decision-making or profiling.

When Google services are used, personal data may be processed in countries outside the European Economic Area. The lawfulness of such transfers may be supported by safeguards under Chapter V GDPR, including an applicable adequacy decision or standard contractual clauses.

Google’s current privacy documentation provides further information about the safeguards it applies. The controller does not otherwise transfer personal data to a third country directly or on its own initiative.

The website consists of static files and maintains no visitor database. Hosting is provided by Cloudflare. In delivering the website, the hosting or content-delivery network may process technically necessary logs, including IP address, request time, requested URL, HTTP response code, referring page, and certain browser and device information.

The purposes are to make the website available, maintain information security, prevent attacks and diagnose errors. The legal basis is the controller’s legitimate interest in secure and reliable website operation under Article 6(1)(f) GDPR.

According to the controller’s balancing of interests, limited technical logging is necessary and proportionate because website security and availability could not otherwise be ensured. A data subject may object on grounds relating to their particular situation.

An embedded Google Maps view loads automatically in the consultation-locations section of the website’s home page. Loading the map establishes a direct connection to Google’s servers. Google may therefore process the visitor’s IP address, browser and device characteristics, time of access and the address of the page visited.

Google may use cookies or similar technologies to operate the map service and may act as an independent controller. The website operator does not determine or control the details of Google’s subsequent processing. Google’s privacy policy is available at https://policies.google.com/privacy.

The website operator embeds the map to present consultation locations clearly and help visitors reach them. The legal basis for the operator’s related processing is its legitimate interest under Article 6(1)(f) GDPR. A visitor may object on grounds relating to their particular situation and may restrict third-party content and cookies through browser privacy settings.

Opening the Directions link takes the visitor away from this website, after which Google Maps’ own terms of use and privacy policy apply.

The website itself uses no marketing, analytics or profiling cookies, runs no Google Analytics, Meta Pixel or other visitor-tracking system, and stores no language preference in browser localStorage. Website fonts are served locally.

The OnStart badge in the footer is loaded from the onstart.hu server. When that resource is requested, the visitor’s IP address, browser information and referring page may become technically available to the system serving it. Opening the OnStart.hu link takes the visitor to an external website.

Google may use its own cookies or similar technologies when Google Maps loads automatically. Their purpose, duration and processing are governed by Google’s terms; visitors may restrict third-party cookies through their browser privacy settings.

The controller applies technical and organisational measures appropriate to the risks and restricts access to personal data to what is necessary. Data-protection and security standards are considered when service providers are selected.

Complete security of internet or email transmission cannot be guaranteed. Data subjects should provide only information necessary for the enquiry, protect their devices and mailboxes, and avoid sending particularly sensitive documents by ordinary email where possible.

A personal-data breach is handled and documented in accordance with Articles 33–34 GDPR, including notification of the supervisory authority and affected data subjects where required.

A data subject may request information about processing and access to personal data, rectification of inaccurate data, completion of incomplete data and, where the GDPR conditions are met, erasure or restriction of processing.

Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. Processing based on legitimate interests may be objected to on grounds relating to the data subject’s particular situation.

Where the GDPR conditions apply, a data subject may receive data they provided in a structured, commonly used and machine-readable format and request transmission to another controller. No automated decision-making or profiling is performed.

Requests may be sent to fodorcili@gmail.com. The controller responds without undue delay and, as a rule, within one month. Where necessary due to complexity or number of requests, this period may be extended by two further months; the data subject will be informed of the extension within one month. Requests are generally handled free of charge.

A person who considers that processing infringes the GDPR or other data-protection law may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): Falk Miksa utca 9–11, 1055 Budapest; postal address: Pf. 9, 1363 Budapest; email: ugyfelszolgalat@naih.hu; website: https://www.naih.hu.

The data subject may also seek a judicial remedy before the competent court, subject to the GDPR and applicable procedural law.

Where possible, the controller asks data subjects to raise a concern directly first so it can be investigated and resolved. This request does not restrict any right to an administrative or judicial remedy.

The controller may amend this notice where the website, service providers, processing practices or legal environment changes. An amendment takes effect upon publication on the website.

The current version is available on this page. The date at the top indicates the latest substantive review.