Privacy Policy

Name: VAMOSOFT Kft.

Registered office: 2310 Szigetszentmiklós, Kert utca 6., Hungary

Company registration number: 13-09-229558

Tax number: 32376755-2-13

Phone: +36 30 822-8542

Email: [email protected]

Represented by: Márk Göbölös (Managing Director)

• Vercel Inc. – 440 N Barranca Ave #4133, Covina, CA 91723, USA – Privacy Policy
• Amazon Web Services Inc. – Friedrich-Ebert-Anlage 36, 60325 Frankfurt am Main, Germany – Privacy Policy

Data collected: name, email address, phone number, project status, motivation, project description, answers to calculator questions.

Purpose: to provide a personalized cost estimate, to contact you regarding your project inquiry, and to store your data in our CRM system (Pipedrive) for sales follow-up.

Legal basis: your voluntary consent (GDPR Art. 6(1)(a)) and our legitimate interest in processing inquiries (GDPR Art. 6(1)(f)).

Data recipients: the data is transmitted to Pipedrive CRM (see Section 5) for lead management. The cost estimate is also sent to you by email via our SMTP provider.

Retention period: until withdrawal of consent, or 2 years from the date of submission if no business relationship is established.

Data collected: name, email address, selected time slot, and any additional information you provide during booking.

Purpose: to schedule a consultation, to store the booking in our CRM system (Pipedrive) for sales follow-up and meeting management.

Legal basis: your voluntary consent (GDPR Art. 6(1)(a)) and steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)).

Data recipients: bookings are handled in the Data Controller's own booking system (portal.vamosoft.net), hosted on Google Cloud infrastructure. The confirmation email, the calendar invite and the Google Meet link are created through Google Workspace (see Section 5), and booking data is synced to Pipedrive CRM for lead management.

Retention period: until withdrawal of consent, or 2 years from the date of booking if no business relationship is established.

Data collected: name and email address.

Purpose: to send marketing newsletters about our services, industry news and offers.

Legal basis: your voluntary consent given by submitting the cost calculator form or booking a consultation (GDPR Art. 6(1)(a)). By submitting, you acknowledge that you may receive newsletters from us.

Data recipients: Pipedrive CRM (see Section 5).

Unsubscribe: you may withdraw your consent at any time by clicking the unsubscribe link in any newsletter email, or by contacting us at [email protected].

Retention period: until withdrawal of consent (unsubscribe).

Data collected: name, company name, phone number, email address and message content.

Purpose: to respond to your inquiry and manage communication.

Legal basis: your voluntary consent (GDPR Art. 6(1)(a)) and our legitimate interest (GDPR Art. 6(1)(f)).

Retention period: until withdrawal of consent, or 2 years from the last communication if no contract is concluded.

Our website uses cookies and analytical tools. The use of non-essential cookies requires your prior consent, managed through our cookie consent banner (CookieYes). We implement Google Consent Mode v2, meaning no tracking takes place until you grant consent.

You can manage your cookie preferences at any time by clicking the cookie settings icon on the bottom left corner of the website. For more information about cookies, visit www.allaboutcookies.org.

Some of our data processors are based outside the European Economic Area (EEA), particularly in the United States. For these transfers, the appropriate safeguards are in place:

• EU-US Data Privacy Framework (DPF): for processors that are certified under the DPF (Google, Microsoft, OpenAI, Pipedrive sub-processors).
• Standard Contractual Clauses (SCCs): approved by the European Commission, ensuring an adequate level of data protection.
• EEA-based processing: Pipedrive OÜ serves EU customers from Estonia (within the EEA).

The Data Controller takes all necessary technical and organizational measures to ensure the security of personal data. This includes encrypted data transmission (SSL/TLS), password-protected access, restricted access on a need-to-know basis, and the use of reputable cloud service providers (AWS, Vercel) with industry-standard security certifications (SOC 2, ISO 27001).

A data breach occurs when a security incident results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data. If a breach is likely to result in a high risk to the rights and freedoms of natural persons, the Data Controller will notify the affected data subjects without undue delay. The Data Controller maintains a data breach register in accordance with GDPR Art. 33(5).

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): you may request confirmation of whether we process your personal data and access to that data.
• Right to rectification (Art. 16): you may request correction of inaccurate personal data.
• Right to erasure (Art. 17): you may request deletion of your personal data ("right to be forgotten").
• Right to restriction (Art. 18): you may request restriction of processing in certain circumstances.
• Right to data portability (Art. 20): you may request to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): you may object to processing based on legitimate interest.
• Right to withdraw consent (Art. 7(3)): you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

If you believe your rights have been violated, you may file a complaint with the Hungarian data protection authority:

You also have the right to bring legal proceedings before the Metropolitan Court of Budapest (Fővárosi Törvényszék) or the court competent at your place of residence.

Our cost calculator uses artificial intelligence (OpenAI) to generate clarifying questions and project cost estimates. This is an advisory tool only and does not produce any legally binding decisions or effects. No automated decision-making or profiling takes place that would significantly affect you within the meaning of GDPR Art. 22.

We reserve the right to update this Privacy Policy from time to time. Material changes will be communicated through our website or by email. We encourage you to review this page periodically.

By using our website, you acknowledge that you have read and understood this Privacy Policy. Use of the cost calculator and consultation booking forms constitutes acceptance of the relevant data processing described herein.