This notice is to inform you, as a visitor to our website and a user of our services, about the data processing and data protection policies of our business.

What principles do we follow in our data management?

Our company adheres to the following principles when processing personal data:
a) We process personal data lawfully, fairly, and in a transparent manner for you.
b) We collect personal data only for specified, explicit, and legitimate purposes, and we do not process them in a way that is incompatible with those purposes.
c) The personal data we collect and process are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
d) Our company takes all reasonable steps to ensure that the data we manage are accurate and, where necessary, kept up to date. Inaccurate personal data are deleted or rectified without delay.
e) We store personal data in a form which permits identification of you only for as long as it is necessary for the purposes of the data processing.
f) We ensure appropriate security of personal data through suitable technical and organizational measures, protecting against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Our company processes your personal data:
a) Based on your prior informed and voluntary consent, only to the extent necessary and always for a specific purpose—that is, we collect, record, organize, store, and use your data accordingly.
b) In certain cases, data processing is required by law. In such cases, we will specifically draw your attention to this fact.
c) In some cases, our company or a third party may have a legitimate interest in processing your personal data—for example, for the operation, development, or security of our website.

Who are we?

Company name: UCO-BIO Ltd. (UCO-BIO Kft.)

Registered office: 9141 Ikrény, Ifjúság utca 13., Hungary
Business site: 2943 Bábolna, Dr. Köves János utca 2., Hungary
Website: www.ucobio.hu
Postal address: 9141 Ikrény, Ifjúság utca 13., Hungary
Phone number: +36 70 610 4030
E-mail address: info@ucobio.hu
Tax number: HU11406936
Company registration number: 08-09-005512

According to Article 37 of the GDPR, our company is not obliged to appoint a Data Protection Officer.
Name, address and contact details of our web hosting provider: Rackhost Zrt., 6722 Szeged, Tisza Lajos krt. 41., Hungary, info@rackhost.hu
To ensure the high-quality service of our clients, we use the following data processor during data processing:
Rackhost Zrt. (6722 Szeged, Tisza Lajos u. 41.) – web hosting services

If there are any changes in our data processors, these changes will be reflected in this notice.
Data we process:

Activity and purpose of data processing:

To ensure the proper and high-quality functioning of our website, to monitor and improve the quality of our services, to identify malicious visitors attacking our site, to measure traffic, and for statistical purposes.

Legal basis: The legitimate interest of the company

Processed data: IP address, date and time of visit, visited subpages, operating system, and browser type used

Retention period: 10 days

Activity and purpose of data processing:

Submitting an inquiry through the website: To maintain contact and provide information or price quotations.

Legal basis: Consent

Processed data: Last name, first name, e-mail address, message, phone number

Retention period: Until the content is deleted from the website

We only request personal data from visitors to our website if they wish to make an inquiry.
For any questions related to data processing, you may contact us at info@ucobio.hu. We will respond as soon as possible, but no later than within 1 month, to the contact information you provide.

What are cookies and how do we manage them?

Cookies are small data files (hereinafter referred to as "cookies") that are placed on your computer when you use our website. These cookies are stored and saved by your internet browser. Most commonly used browsers (such as Chrome, Firefox, etc.) accept and enable cookies by default. However, it is up to you whether you modify your browser settings to refuse or disable cookies. You can also delete cookies already stored on your device at any time. For more detailed information about cookie settings, please consult the “Help” section of your browser.
There are certain types of cookies that do not require your prior consent. Our website provides brief information about these upon your first visit. These include authentication cookies, multimedia player cookies, load balancing cookies, session cookies that help with customizing the user interface, and user-centric security cookies.
For cookies that require your consent—if data processing begins as soon as the website is visited—our company will inform you at the start of your first visit and ask for your permission.
Our company does not use or permit cookies that allow third parties to collect data without your consent.
Accepting cookies is not mandatory; however, please note that our company cannot be held responsible if the website does not function as expected in the absence of enabled cookies.

What else should you know about how we handle personal data on our website?

You provide your personal data to us voluntarily when sending a message or communicating with our company. Therefore, we kindly ask you to ensure that all information you provide is accurate, true, and up to date, as you are responsible for the correctness of this data. Incorrect, inaccurate, or incomplete data may hinder the use of our services.
If you provide personal data that does not belong to you but to another individual, we assume that you have the necessary authorization to do so.
You may withdraw your consent to data processing at any time, free of charge, by:

– revoking your consent to data processing, or
– withdrawing your consent to the processing or use of any mandatory data provided during message sending, or by requesting the blocking of such data.
Due to technical reasons, we register the withdrawal of consent within a maximum of 30 days. However, please note that we may continue to process certain data even after consent has been withdrawn if it is necessary for us to fulfill a legal obligation or to enforce our legitimate interests.
If misleading personal data is used, or if a visitor commits a criminal offense or attacks our systems, we may retain the relevant personal data for the duration necessary to establish civil liability or conduct criminal proceedings.

Other Data Processing Matters

We only transfer your personal data within the limits set by applicable law. In the case of data processors, we ensure through contractual terms that they may not use your personal data for purposes that are contrary to your consent. For more details, please refer to Section 2.
Our company does not transfer data to foreign countries.
Courts, public prosecutors, and other authorities (e.g. the police, tax authority, or the National Authority for Data Protection and Freedom of Information) may contact our company to request information, disclose data, or provide documents. In such cases, we are legally obligated to comply, but only to the extent strictly necessary to fulfill the purpose of the request.
Employees and contributors involved in our company’s data processing and/or data handling may access your personal data to a pre-defined extent and are bound by confidentiality obligations.
We protect your personal data with appropriate technical and organizational measures to ensure the security, availability, and integrity of the data, and to safeguard it against unauthorized access, alteration, damage, disclosure, or any other unauthorized use.
As part of our organizational measures, we control physical access to our premises and securely store paper-based documents. Our technical measures include encryption, password protection, and antivirus software. However, please note that data transmission over the internet cannot be considered completely secure. While we do everything possible to make our systems as secure as possible, we cannot accept full responsibility for data transmitted via our website. Once the data is received by our company, we strictly follow internal security policies to protect it and prevent unauthorized access.

What Are Your Rights and Legal Remedies?

You have the right to:
– request information about data processing,
– request correction, modification, or supplementation of the personal data we process,
– object to data processing and request deletion or blocking of your data (except in cases of mandatory data processing),
– seek legal remedy before a court,
– file a complaint or initiate proceedings with the supervisory authority (https://naih.hu/panaszuegyintezes-rendje.html).
Supervisory Authority: National Authority for Data Protection and Freedom of Information (NAIH)
Headquarters: 1055 Budapest, Falk Miksa Street 9-11
Mailing address: 1363 Budapest, P.O. Box 9
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu/
Upon your request, we provide information about the personal data we process or that is processed by our appointed data processors, including information on:
– the data itself,
– its source,
– the purpose and legal basis of data processing,
– the duration of data processing or, if that is not possible, the criteria for determining this duration,
– the names, addresses, and activities of our data processors related to data management,
– circumstances, impacts, and measures taken to mitigate and prevent data protection incidents,
– and in the case of data transfers, the legal basis and recipients of such transfers.
We will respond to your request as soon as possible, within 10 days, but no later than one month. Providing this information is free of charge. We may only refuse to provide information in cases specified by law, citing the relevant legal provisions, and informing you about your right to legal remedy and to approach the supervisory authority.
Our company will notify you and all recipients to whom we have previously disclosed your data for processing purposes about any correction, blocking, marking, or deletion of your personal data, unless the omission of such notification does not harm your legitimate interests.
If we do not fulfill your request for correction, blocking, or deletion, we will notify you in writing or electronically (with your consent) within 10 days (no later than one month) of receiving your request, explaining the reasons for the refusal and informing you about the possibility of judicial remedy and lodging a complaint with the supervisory authority.
If you object to the processing of your personal data, we will examine the objection as soon as possible, within 10 days (no later than one month) from the submission of the request, and notify you of our decision in writing. If we decide that your objection is justified, we will cease data processing — including further data collection and transfer — block the data, and notify all recipients to whom the personal data concerned has previously been disclosed, who are obligated to act to enforce your objection.
We will refuse to fulfill your request if we demonstrate that the data processing is justified by overriding legitimate reasons which outweigh your interests, rights, and freedoms, or if it relates to the establishment, exercise, or defense of legal claims. If you disagree with our decision or if we miss the deadline, you may turn to a court within 30 days from the notification of the decision or from the last day of the deadline.
Data protection litigation falls within the jurisdiction of the court, which may be filed either at the court competent according to your place of residence or habitual residence, at your choice. Foreign nationals may also file a complaint with the supervisory authority competent according to their place of residence.
We kindly ask you, before turning to the supervisory authority or court with your complaint, to contact our company first in order to facilitate a quicker resolution of the problem.

What are the main applicable laws governing our activities?

– Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)
– Act CXII of 2011 on the right of informational self-determination and freedom of information (Info Act)
– Act V of 2013 on the Civil Code (Civil Code)
– Act CVIII of 2001 on certain issues of electronic commerce services and information society services (E-Commerce Act)
– Act C of 2003 on electronic communications (Ehtv)
– Act CLV of 1997 on consumer protection (Consumer Protection Act)
– Act CLXV of 2013 on complaints and public interest disclosures (Complaints Act)
– Act XLVIII of 2008 on the basic conditions and certain restrictions of economic advertising activities (Advertising Act)

Modification of the Privacy Policy

Our company reserves the right to modify this Privacy Policy, about which the data subjects will be appropriately informed. Information related to data processing will be published on the website https://ucobio.hu/adatkezelesi-tajekoztato.

 

Ikrény, June 23, 2025