Privacy Notice
How we process personal data when you contact us, in the course of our services and on the client platform, under Article 13 of Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 (Infotv.).
Effective: 4 November 2026
This is an English translation for convenience; in case of any discrepancy, the Hungarian version prevails.
1. The controller
P1R4T3 Security. E-mail: rharan@p1r4t3.hu. Full company details are set out in the proposal and the agreement.
2. Data, legal bases and retention
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact requests | Name, e-mail, company, message | Responding to enquiries, preparing proposals | Pre-contract steps, legitimate interest: GDPR Art. 6(1)(b), (f) | One year after the enquiry is closed; if contracted, as for contract data |
| Client contact persons | Name, title, e-mail, phone | Performing the contract, communication | Legitimate interest: Art. 6(1)(f) | 5 years from termination (Civil Code 6:22) |
| Invoicing | Data on invoices | Accounting obligation | Legal obligation: Art. 6(1)(c) | 8 years (Act C of 2000, section 169) |
| Platform accounts and logs | Username or e-mail, password hash, two-factor data, role, actions, time, IP address | Access, security, accountability | Performance of the contract, legitimate interest: Art. 6(1)(b), (f) | Until the account ends, or as long as the security purpose requires |
| Test data | Personal data exposed in tested systems | Performing the engagement, under confidentiality | As the Client's processor, on its instructions: GDPR Art. 28 | For the period in the rules of engagement, then deleted |
Our legitimate interests are performing contracts, communication and protecting our systems. We provide the result of the balancing test on request. Without the data needed for the contract the service cannot be provided; contacting us is voluntary.
3. Processors
Hosting, server and e-mail provider: Rackhost Zrt. (Hungary). Where applicable, our appointed accountant.
4. Transfers
We do not disclose personal data to third parties unless required by law, and we do not transfer it to third countries. We send only public identifiers to vulnerability data sources (NVD, FIRST, MITRE, CISA), not personal data. We do not carry out automated decision-making or profiling.
5. Your rights
Access, rectification, erasure, restriction, data portability, and objection to processing based on legitimate interest (GDPR Art. 15–21). Requests: rharan@p1r4t3.hu. We respond within one month at most (GDPR Art. 12).
6. Remedies
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11; postal: 1363 Budapest, Pf. 9; phone: +36 1 391 1400; e-mail: ugyfelszolgalat@naih.hu; naih.hu.
You may also go to court, including the tribunal of your home or residence (GDPR Art. 79, Infotv. section 23).
7. Data security
Encrypted connections (TLS), invitation-only access, role-based permissions, two-factor authentication, logging and regular backups (GDPR Art. 32).
8. Cookies
This website does not use cookies, analytics or marketing tools. The client platform uses only the cookies needed for signing in and operation. Fonts are served from our own server; no data is transferred to third parties.