Privacy notice

Providers and external media

Website operator and hosting provider: Branaldi Hungary Kft.

The website runs on self-managed hosting. Hosting provider contact: 1201 Budapest, Torontál utca 28. · branaldi@papirbol.hu · +36 30 428 8931

Google Maps loads only after permission. Google then receives the IP address and browser technical information and may use cookies or other storage. Permission lasts for the browsing session and can be withdrawn below any loaded content. The main site and contact details remain available without it.

Google services may involve international processing. Processor agreements and applicable transfer safeguards must be verified before public operation.

1. Data controller

Branaldi Hungary Kft., 1201 Budapest, Torontál utca 28., email: branaldi@papirbol.hu, phone: +36 30 428 8931.

Branaldi Hungary Kft. is committed to lawful, fair and transparent processing of personal data. This notice applies to website visitors, quote requesters and users of the customer portal.

2. Data and purposes

Contact: name, email address, phone number, message, optional 3D configuration. Purpose: responding to the quote request and documenting the contact.

Customer portal: name, company, email, phone, order and product data, delivery data, project notes. Purpose: performing the contract, tracking production and customer communication.

Administration: account data, login and audit logs, IP address, user agent. Purpose: system security, access control and fraud prevention.

Cookies: strictly necessary session cookies (HttpOnly, SameSite=Strict) and a language preference cookie. We do not operate our own marketing trackers. External-media permission is kept in sessionStorage; the theme preference is kept in localStorage.

3. Legal basis

Contact data is processed on the basis of consent (GDPR Art. 6(1)(a)) and pre-contractual steps (Art. 6(1)(b)).

Customer portal and contractual data is processed for contract performance (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)).

Security logs are processed on the basis of Branaldi Hungary Kft.’s legitimate interest in protecting the system and preventing abuse (Art. 6(1)(f)).

4. Retention

Contact enquiries are retained for up to 12 months from submission. Contract and accounting records follow their separate legal retention periods.

Contract and invoicing data is retained for 8 years in accordance with Hungarian accounting and tax rules.

Session and security logs are retained for technical needs, up to 12 months. Expired sessions are deleted regularly.

5. Processors and transfers

Hosting and IT providers, and technical partners required to operate the website. Processors access only the necessary data under confidentiality obligations.

International transfers require appropriate safeguards. Hosting and external content providers are identified in the provider section above.

6. Your rights

You have the right to access, rectify, erase or restrict the processing of your personal data, to object to processing and to data portability.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Send requests to branaldi@papirbol.hu. You may also contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu).

7. Security

Passwords are protected with a strong adaptive hash (bcrypt, cost 12 or higher). Sessions use HttpOnly, Secure and SameSite=Strict cookies, a short-lived access token and a rotated refresh token.

The admin interface uses server-side role checks, brute-force protection, optional TOTP two-factor authentication and audit logging. Customer data is accessible only to authorised users.

The system applies CSP, HSTS, X-Content-Type-Options, X-Frame-Options and other security headers. Uploads are stored privately and served only through authorised API endpoints.

8. Contact

Data protection questions: branaldi@papirbol.hu, +36 30 428 8931. Postal address: Branaldi Hungary Kft., 1201 Budapest, Torontál utca 28.

Last updated: 28 October 2026.