1. The data controller
Name: Lenker Solutions Építőipari Korlátolt Felelősségű Társaság
Abbreviated name: Lenker Solutions Építőipari Kft.
Registered office: 4287 Vámospércs, Vágóhíd utca 29., Hungary
Company registration number: 09-09-037250
Tax number: 32895441-2-09
Email: info@lenkersolutions.hu
Telephone: +36 20 927 3790
Website: www.lenkersolutions.hu
2. Applicable legislation and principles
Data processing is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information.
The controller processes personal data lawfully, fairly and transparently, for specified purposes, limited to what is necessary, accurately and with appropriate security. We retain personal data only for as long as the processing purpose or a statutory obligation requires.
3. Data processing related to the technical operation of the website
When the website is accessed, the hosting and infrastructure provider may process technical logs. These may include the IP address, the time of the request, the address of the page accessed, basic browser and operating system information, and error diagnostic data.
Purpose: ensuring the availability, security and stability of the website, resolving errors and preventing misuse.
Legal basis: legitimate interests under Article 6(1)(f) GDPR.
Retention: the technical and security retention period applied by the provider, or no longer than necessary to investigate a security incident.
4. Contact, quotation requests and technical enquiries
We process information provided through the contact form or by email to receive and answer enquiries, prepare quotations, discuss technical matters and maintain contact.
Data processed:
- name;
- email address;
- the subject and content of the message;
- any telephone number or other contact details provided voluntarily;
- uploaded attachments and their contents;
- technical data related to submission.
Legal basis: Article 6(1)(b) GDPR for steps taken before entering into a contract; legitimate interests under Article 6(1)(f) GDPR for other enquiries.
Retention: enquiries that do not result in a contract are retained for 12 months from the last substantive communication. Where a contract is concluded, the separate contractual and accounting retention rules in section 6 apply. Documents needed for a specific legal dispute or statutory obligation are retained for the period necessary for that purpose.
5. Job applications and CVs
We process the data submitted by job applicants to assess applications, maintain contact and prepare a possible employment relationship.
Data processed may include:
- name and contact details;
- information in the CV and cover letter;
- qualifications, professional experience, licences and skills;
- a photograph, if provided voluntarily by the applicant;
- documents and correspondence submitted by the applicant.
Legal basis: Article 6(1)(b) GDPR. The privacy notice checkbox acknowledges that the applicant has read the notice; it is not consent to marketing or retention for future vacancies.
Retention: unsuccessful applications are retained for 90 days after the recruitment procedure closes. Assessment of a speculative application is treated as a separate recruitment procedure. If an applicant is hired, the data necessary for employment is covered by a separate employee notice and retention rules. The website does not maintain a CV database for future vacancies.
The application form requires one CV file in PDF, DOC or DOCX format, up to 5 MB. Please do not include special categories of personal data in your application documents if they are unnecessary for recruitment.
6. Contractual and client relationship data
When entering into and performing a contract, we process necessary identification and contact details of clients, contact persons, representatives, subcontractors and other contributors, along with data relating to the contract, performance, documentation, invoicing and enforcement of claims.
Legal basis: Article 6(1)(b) GDPR for a contracting natural person; Article 6(1)(f) GDPR for contact persons of a legal entity; Article 6(1)(c) GDPR for accounting and tax data.
Retention: typically five years for civil claims, and at least eight years for accounting records.
7. Form handling and email delivery
Contact and career submissions are validated by the Lenker Solutions Cloudflare-based server and forwarded by email using Resend. Solutions enquiries and applications are delivered to info@lenkersolutions.hu. The same server forwards quotation requests and career applications submitted on the Lenker Group website to info@lenkergroup.hu.
The information forwarded consists of the name, email address, subject or selected position, message, selected service, any company and telephone details provided, the attachment and a technical submission reference. Attachments are limited to 5 MB; each form lists its permitted formats. The website does not create a separate database of messages or attachments: it processes and forwards them by email. The email account and delivery provider may still retain operational information under the applicable rules.
To prevent misuse, the server may temporarily hold the sender's IP address and request count in memory. Analytics or advertising consent is not required to submit a form.
8. Processors and external providers
- OpenAI Sites / OpenAI Ireland Ltd – website serving and hosting; 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Further information: OpenAI Privacy Policy.
- Cloudflare, Inc. – website infrastructure, content delivery and security services; 101 Townsend Street, San Francisco, CA 94107, United States. Further information: Cloudflare Privacy Policy.
- Plus Five Five, Inc. / Resend – transactional email and delivery of form messages; 2261 Market Street #5039, San Francisco, CA 94114, United States. Further information: Resend Privacy Policy and Data Processing Addendum.
- Google Maps – the embedded footer map loads automatically when the page opens, without a separate click. When the map loads, the browser automatically connects to Google. Google may then receive your IP address and technical browser information, and may use its own cookies under its Privacy Policy. We do not store a separate map-loading choice. The analytics and advertising switches in Cookie settings do not control map loading.
- The controller's email, accounting, legal, IT or construction service providers may access only the data necessary for their work.
Some providers may also process data outside the European Economic Area. Their notices and data processing terms linked above provide further information about processing locations, terms and transfer safeguards.
9. Recipients and transfers
We transfer personal data only on the basis of a statutory obligation, an authority's request, performance of a contract, or appropriate information provided to the data subject. The controller does not sell personal data or use it for unsolicited marketing.
10. Data security
The controller and its contributors apply technical and organisational measures appropriate to the risks of processing. These include access restrictions, HTTPS connections, permission management, regular updates, security logging and avoiding unnecessary retention. Internet data transmission cannot be guaranteed to be entirely risk-free.
11. Rights of data subjects
Subject to the GDPR, data subjects may request:
- information about and access to the data processed;
- rectification of inaccurate personal data;
- erasure of personal data;
- restriction of processing;
- data portability;
- withdrawal of consent;
- the right to object to processing based on legitimate interests;
- the exercise of rights relating to automated decision-making.
Requests can be sent to info@lenkersolutions.hu. The controller responds without undue delay, generally within one month. Reasonable verification of the requester's identity may be required where necessary.
12. Complaints and remedies
Data subjects may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Email: ugyfelszolgalat@naih.hu
Telephone: +36 1 391 1400
Current ways of initiating a procedure are explained on the NAIH contact page; proceedings cannot be initiated by ordinary email. Data subjects may also bring proceedings before a court. At their choice, proceedings may also be brought before the regional court with jurisdiction over their place of residence or stay.
13. Automated decision-making
The controller does not carry out solely automated decision-making based on data submitted through the website, nor profiling that produces legal or similarly significant effects.
14. Cookies, measurement and external content
The consent manager stores the visitor's choice in browser local storage under lenker_cookie_consent. A saved choice is valid for 180 days; after it expires, a new choice is requested on the next visit. Settings can be changed at any time through “Cookie settings” in the footer.
Google Analytics, Google Ads and Meta Pixel have been technically prepared, but no measurement or advertising identifiers are configured, so these services are currently inactive. Future activation requires consent for the relevant service. The prepared conversion event can occur only after the server confirms a successful form submission. Names, email addresses, telephone numbers, messages and CVs entered in a form are not passed to measurement services. Browser and event data may nevertheless constitute personal data.
The Cookie Policy explains the current operation and choice management in detail.
15. Changes to this notice
The controller may amend this notice when the website's operation, services or legal environment change. The current version is always available on this page.