{"id":4881,"date":"2025-11-26T23:11:41","date_gmt":"2025-11-26T22:11:41","guid":{"rendered":"https:\/\/digixray-labs.com\/?page_id=4881"},"modified":"2026-08-10T20:41:47","modified_gmt":"2026-08-10T18:41:47","slug":"data-controller-statement","status":"publish","type":"page","link":"https:\/\/digixray-labs.com\/en\/adatkezelesi-nyilatkozat\/","title":{"rendered":"Privacy Notice"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"4881\" class=\"elementor elementor-4881\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-88a865fc e-con-full e-flex e-con e-parent\" data-id=\"88a865fc\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-14a82db5 elementor-widget elementor-widget-html\" data-id=\"14a82db5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<style>.dx-legal-shell{font-family:Montserrat,Arial,sans-serif;color:#15283B;background:#F3F7FC}.dx-legal-shell *{box-sizing:border-box}.dx-legal-shell a{color:#235E9B;text-decoration-thickness:1px;text-underline-offset:3px}.dx-legal-shell a:hover{color:#49A2FF}.dx-legal-shell a:focus-visible{outline:3px solid rgba(73,162,255,.45);outline-offset:3px;border-radius:3px}.dx-legal-hero{background:linear-gradient(135deg,#102A46 0%,#284A7E 62%,#4070B8 100%);position:relative;overflow:hidden}.dx-legal-hero:after{content:'';position:absolute;right:-100px;top:-180px;width:520px;height:520px;border-radius:50%;background:rgba(73,162,255,.14)}.dx-legal-card{background:#FFF;border:1px solid #D9E3EE;border-radius:12px;padding:clamp(26px,4vw,48px);box-shadow:0 20px 55px rgba(17,48,79,.10);line-height:1.75}.dx-legal-card h2{margin:32px 0 16px;color:#284A7E;font:700 clamp(24px,3vw,34px)\/1.2 Montserrat,Arial,sans-serif}.dx-legal-card h2:first-child{margin-top:0}.dx-legal-card h3{margin:28px 0 10px;color:#193A5F;font:700 20px\/1.35 Montserrat,Arial,sans-serif}.dx-legal-card p{margin:0 0 15px}.dx-legal-card ul{margin:8px 0 18px;padding-left:22px}.dx-legal-card li{margin:7px 0}.dx-legal-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1px;margin:20px 0 28px;background:#D9E3EE;border:1px solid #D9E3EE;border-radius:8px;overflow:hidden}.dx-legal-grid>div{background:#F8FBFF;padding:17px 19px}.dx-legal-grid b{display:block;margin-bottom:5px;color:#284A7E;font-size:12px;letter-spacing:.08em;text-transform:uppercase}.dx-legal-table-wrap{overflow-x:auto;margin:20px 0 28px}.dx-legal-table{width:100%;min-width:980px;border-collapse:collapse;font-size:13.5px}.dx-legal-table th,.dx-legal-table td{padding:13px 14px;border:1px solid #D9E3EE;text-align:left;vertical-align:top}.dx-legal-table th{background:#E9F2FB;color:#284A7E;font-weight:800}.dx-legal-table tr:nth-child(even) td{background:#F8FBFF}.dx-legal-note{margin:22px 0;padding:17px 20px;border-left:4px solid #49A2FF;background:#EDF6FF;color:#24435F}.dx-legal-warning{margin:22px 0;padding:17px 20px;border-left:4px solid #E0A241;background:#FFF7E9;color:#5C4219}.dx-legal-links{display:flex;flex-wrap:wrap;gap:10px 18px;margin-top:32px;padding-top:22px;border-top:1px solid #D9E3EE}.dx-legal-links a{font-weight:700;text-decoration:none}.dx-legal-updated{margin-top:28px!important;color:#66788A;font-size:13px}@media(max-width:700px){.dx-legal-grid{grid-template-columns:1fr}.dx-legal-card{border-radius:8px;padding:25px 20px}.dx-legal-table{min-width:880px}}<\/style>\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e5bcc5a0 e-con-full e-flex e-con e-child\" data-id=\"e5bcc5a0\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-07f73726 e-con-boxed e-flex e-con e-child\" data-id=\"07f73726\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-759e6a72 elementor-widget elementor-widget-heading\" data-id=\"759e6a72\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Privacy Notice<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d0fb6636 elementor-widget elementor-widget-text-editor\" data-id=\"d0fb6636\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Transparent information about what personal data DigiXRAY Labs processes, for what purposes, on what legal basis, and for how long.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2cc24a56 e-con-boxed e-flex e-con e-child\" data-id=\"2cc24a56\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e4d15038 elementor-widget elementor-widget-text-editor\" data-id=\"e4d15038\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<article class=\"dx-legal-card\"><h2>1. Data Controller<\/h2><div class=\"dx-legal-grid\"><div><b>Name<\/b>M\u00e1rton Horv\u00e1th \u2013 DigiXRAY Labs Web Development &amp; Web Design<\/div><div><b>Title<\/b>37 Wallstra\u00dfe<br>55122 Mainz<br>Germany<\/div><div><b>E-mail<\/b><a href=\"mailto:hello@digixray-labs.com\">hello@digixray-labs.com<\/a><\/div><div><b>Phone<\/b><a href=\"tel:+36209714147\">+36 20 971 4147<\/a><\/div><div><b>Community Tax ID Number<\/b>DE459201917<\/div><div><b>Website<\/b><a href=\"https:\/\/digixray-labs.com\/\">https:\/\/digixray-labs.com\/<\/a><\/div><\/div><p>This privacy notice applies to the processing of personal data on the digixray-labs.com domain, its forms, customer service interfaces, and the related digital systems of DigiXRAY Labs.<\/p><h2>2. Principles and Data Sources<\/h2><p>DigiXRAY Labs processes personal data lawfully, fairly, transparently, for specific purposes, and in accordance with the principle of data minimization. Data may be obtained directly from the data subject, through the technical use of the website, from customer or support interactions, or\u2014with consent\u2014from analytics or advertising providers.<\/p><p>We do not sell personal data. We do not ask for special categories of data, credit card information, passwords, or other sensitive information on our general contact, support, and AI platforms.<\/p><h2>3. Data Processing in Detail<\/h2><div class=\"dx-legal-table-wrap\"><table class=\"dx-legal-table\"><thead><tr><th>Data Processing<\/th><th>Data Processed and Purpose<\/th><th>Legal Basis<\/th><th>Preservation<\/th><\/tr><\/thead><tbody><tr><td><strong>Website, Server Logs, and Security<\/strong><\/td><td>IP address, date and time, requested URL, HTTP status, referring page, browser and device information, security events. Purpose: page loading, troubleshooting, and prevention of attacks and abuse.<\/td><td>GDPR Article 6(1)(f): legitimate interest in a secure and functional web service; for access to end devices, TDDDG Section 25(2), if strictly necessary.<\/td><td>For as long as necessary for technical and security purposes; in the event of an incident, until the investigation and enforcement of legal remedies are completed.<\/td><\/tr><tr><td><strong>Contact Us, Request a Quote, and Project Needs Assessment<\/strong><\/td><td>Name, email address, phone number, website URL, business and project details, message, attachments, and the form\u2019s technical metadata. Purpose: to respond to your inquiry, assess your needs, and prepare a proposal and contract.<\/td><td>Article 6(1)(b) of the GDPR, if a pre-contractual measure is taken at the request of the data subject; otherwise, Article 6(1)(f) of the GDPR, legitimate interest in handling inquiries.<\/td><td>Until the matter is resolved; in the case of a contract, until the end of the contractual and statutory retention period; in the case of a legal claim, until the statute of limitations expires.<\/td><\/tr><tr><td><strong>Customer, Project, and CRM Records<\/strong><\/td><td>Contact information, project ID, status, tasks, communication history, consent status, and internal notes. Purpose: project management, customer relations, quality assurance, and business administration.<\/td><td>Article 6(1)(b), (c), and (f) of the GDPR, depending on the specific data and purpose.<\/td><td>In accordance with the term of the contract and the follow-up period, as well as the applicable deadlines for accounting, tax, or claims enforcement.<\/td><\/tr><tr><td><strong>Email and Phone<\/strong><\/td><td>Contact information, message content, sender\/recipient, date and time, technical delivery data. Purpose: communication, administrative matters, and verifiability.<\/td><td>Article 6(1)(b) or (f) of the GDPR; for compliance documentation, Article 6(1)(c).<\/td><td>Until the matter is resolved, and thereafter as required by law or to enforce claims.<\/td><\/tr><tr><td><strong>Customer Service Portal and SupportCandy Ticket<\/strong><\/td><td>Account and contact information, ticket subject, messages, attachments, status, priority, and agent activity. Purpose: to manage and document support requests.<\/td><td>Article 6(1)(b) and (f) of the GDPR.<\/td><td>Until the grant matter is closed, and for the period necessary to address any contractual or legal claims.<\/td><\/tr><tr><td><strong>Newsletter and Professional Information<\/strong><\/td><td>Name, email address, subscription and unsubscription dates, proof of consent, delivery data, and\u2014if permitted\u2014open\/click data. Purpose: to send requested professional content.<\/td><td>Article 6(1)(a) of the GDPR: voluntary consent. With regard to proving consent and preventing abuse, see Article 6(1)(f) of the GDPR.<\/td><td>Until unsubscription; proof of consent may be retained on a limited basis until the end of the claim period.<\/td><\/tr><tr><td><strong>AI chatbot and AI-powered processing<\/strong><\/td><td>Text entered by the user, conversational context, technical identifiers, and data required to generate a response. Purpose: to provide a response requested by the user, pre-screening, summarization, or task support.<\/td><td>Article 6(1)(b), (f), or (a) of the GDPR, depending on the purpose and at the initiative of the data subject.<\/td><td>For the time required to perform the function and carry out administrative tasks; a quality assurance log may be maintained only if there is a documented need and an appropriate legal basis.<\/td><\/tr><tr><td><strong>Analytics and UX Measurement<\/strong><\/td><td>Online identifiers, IP and device data, page views, clicks, scrolling, session and usage events; for example, Microsoft Clarity or Google Analytics, if actually configured.<\/td><td>Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG: prior consent.<\/td><td>Until consent is withdrawn or until the end of the documented and configured retention period for the service in question.<\/td><\/tr><tr><td><strong>Marketing and Conversion Tracking<\/strong><\/td><td>Online identifiers, campaign sources, conversion events, device and browser data; for example, Google Ads, Meta Pixel, or Microsoft UET, if configured.<\/td><td>Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG: prior consent.<\/td><td>Until the consent is withdrawn or until the end of the service provider's retention period.<\/td><\/tr><tr><td><strong>Browser Notification<\/strong><\/td><td>Push subscription ID, browser and device data, notification interactions. Purpose: to send notifications requested by the data subject.<\/td><td>Article 6(1)(a) of the GDPR, as well as separate consent from the browser.<\/td><td>Until revoked or the subscription is terminated.<\/td><\/tr><tr><td><strong>Translation and Display Preferences<\/strong><\/td><td>Selected language and related technical preference. Purpose: to display the requested language version.<\/td><td>Article 6(1)(f) of the GDPR, or consent in the case of prolonged, unnecessary storage.<\/td><td>Until the end of the session or until the documented lifetime of the selection expires.<\/td><\/tr><\/tbody><\/table><\/div><p class=\"dx-legal-warning\"><strong>AI and Form Security:<\/strong> Please do not provide passwords, credit card information, health information, government-issued identification, or other particularly sensitive information unless DigiXRAY Labs specifically requests it as part of a specific, secure, and lawful process.<\/p><h2>4. Automated Decision-Making<\/h2><p>We do not use any fully automated decision-making or profiling on this website that would have legal effects or similarly significant consequences for the data subject. Any AI-generated outline, summary, or preliminary screening does not constitute an independent, final business decision.<\/p><h2>5. Data Processors and Recipients<\/h2><p>Depending on the specific function and configuration, the following categories of service providers, in particular, may be involved in data processing:<\/p><ul><li><strong>HOSTINGER Operations, UAB<\/strong> \u2013 hosting, infrastructure, and server logs;<\/li><li><strong>WordPress, Elementor, and related plugins<\/strong> \u2013 content management and form functionality;<\/li><li><strong>Fluent Forms, FluentCRM, and FluentSMTP<\/strong> \u2013 forms, contact records, project and email workflows;<\/li><li><strong>SupportCandy<\/strong> \u2013 customer service tickets and responses;<\/li><li><strong>Cloudflare Turnstile and Security Services<\/strong> \u2013 bot and abuse prevention, if active on that platform;<\/li><li><strong>Microsoft<\/strong> \u2013 Clarity and UET\/Bing, provided that the appropriate consent and configuration requirements are met;<\/li><li><strong>Google and Meta<\/strong> \u2013 analytics, conversion tracking, or advertising, if actually configured and enabled;<\/li><li><strong>OpenAI or another AI provider<\/strong> \u2013 only to the extent necessary for the activated, specifically designated AI function;<\/li><li><strong>Gravitec<\/strong> \u2013 browser notifications, if the data subject subscribes;<\/li><li><strong>the email provider that is actually configured<\/strong> \u2013 delivery of messages.<\/li><\/ul><p>We engage service providers as data processors or independent data controllers, depending on their specific legal role. We restrict access by data processors through contractual and technical safeguards.<\/p><h2>6. Data Transfers to Third Countries<\/h2><p>Some technology service providers may process data outside the European Economic Area. Transfers may only take place under the conditions set forth in Chapter V of the GDPR, such as an adequacy decision, the EU\u2013U.S. Data Privacy Framework, general terms and conditions, supplementary measures, or other appropriate safeguards. The specific safeguard depends on the service provider used and its current legal status.<\/p><h2>7. Retention and Deletion<\/h2><p>We process the data for as long as necessary to achieve the purpose. After that, we delete or anonymize it, unless further limited storage is justified by a statutory retention obligation, an ongoing contract, a complaint, a security incident, or a legal claim. The main factors in determining the retention period are: the purpose of processing, the contractual relationship, mandatory accounting and tax deadlines, the statute of limitations, the status of consent, and technical security requirements.<\/p><h2>8. The Data Subject's Rights<\/h2><p>Subject to the applicable conditions, the data subject is entitled to:<\/p><ul><li>request access to and a copy of your personal data;<\/li><li>request the correction of inaccurate data or the completion of incomplete data;<\/li><li>request erasure or restriction of data processing;<\/li><li>to object to data processing based on legitimate interests;<\/li><li>to revoke this consent at any time in the future;<\/li><li>to request data portability, if the conditions for it are met;<\/li><li>file a complaint with the data protection supervisory authority.<\/li><\/ul><p>The application was submitted by the <a href=\"mailto:hello@digixray-labs.com\">hello@digixray-labs.com<\/a> It must be sent to this address. DigiXRAY Labs will respond without undue delay, generally within one month. It will verify your identity only to the extent necessary to prevent unauthorized access.<\/p><h2>9. Right to File a Complaint<\/h2><p>The data subject may contact the data protection authority responsible for his or her usual place of residence, place of work, or the location of the alleged violation. The authority with jurisdiction based on the data controller\u2019s registered office is:<\/p><p><strong>The State Commissioner for Data Protection and Freedom of Information in Rhineland-Palatinate<\/strong><br>34 Hintere Bleiche<br>55116 Mainz, Germany<br>Phone: +49 6131 8920-0<br>Email: <a href=\"mailto:poststelle@datenschutz.rlp.de\">poststelle@datenschutz.rlp.de<\/a><\/p><h2>10. Data Security<\/h2><p>DigiXRAY Labs implements technical and organizational measures commensurate with the risk, including access restrictions, logging, security safeguards, and update and incident management processes. Absolute security cannot be guaranteed for data transmitted over the Internet; therefore, confidential data should only be transmitted via a designated secure channel.<\/p><h2>11. Cookies and Technologies<\/h2><p>The detailed rules governing technologies related to terminal equipment are set forth in the <a href=\"https:\/\/digixray-labs.com\/suti-tajekoztato\/\">Cookie information<\/a> includes. Analytical and marketing technologies that are not strictly necessary can only be enabled with appropriate prior consent.<\/p><h2>12. Amendment<\/h2><p>This notice is updated whenever there are changes to our services, data streams, or applicable laws. We will clearly highlight any material changes if doing so is necessary for data subjects to reasonably exercise their rights.<\/p><nav class=\"dx-legal-links\" aria-label=\"Legal Documents\"><a href=\"https:\/\/digixray-labs.com\/impresszum\/\">Legal Notice<\/a><a href=\"https:\/\/digixray-labs.com\/suti-tajekoztato\/\">Cookie information<\/a><a href=\"https:\/\/digixray-labs.com\/aszf\/\">GTC<\/a><a href=\"https:\/\/digixray-labs.com\/adatkezelesi-nyilatkozat\/\">Privacy Notice<\/a><\/nav><p class=\"dx-legal-updated\">Effective and last updated: August 10, 2026.<\/p><\/article>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"Discover our comprehensive data management policy, ensuring transparency and compliance with GDPR and EU AI regulations for your personal data protection.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-site-content-layout":"full-width-container","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"wpai_generated_summary":"","footnotes":""},"class_list":["post-4881","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/digixray-labs.com\/en\/wp-json\/wp\/v2\/pages\/4881","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digixray-labs.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/digixray-labs.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/digixray-labs.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/digixray-labs.com\/en\/wp-json\/wp\/v2\/comments?post=4881"}],"version-history":[{"count":0,"href":"https:\/\/digixray-labs.com\/en\/wp-json\/wp\/v2\/pages\/4881\/revisions"}],"wp:attachment":[{"href":"https:\/\/digixray-labs.com\/en\/wp-json\/wp\/v2\/media?parent=4881"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}