Privacy Notice.

In short

This website sets no cookies, uses no analytics, advertising or social media plug-ins, and loads no content from third-party servers. Fonts, scripts and images are served by the website itself. Personal data is processed in two situations only: when your browser requests a page, and when you send us a message through one of the forms.

Controller

The controller responsible for the processing described here is OnairTech Magyarország Kft. (“we”, “us”), company registration number: 13-09-204241.

You can contact us about data protection through the contact form; choose the inquiry type “Other” and mention data protection in your message.

We have not appointed a data protection officer, because the law does not require one for the processing we carry out.

Visiting the website: server logs

When you open a page, your browser sends technical information to the web server, which records it in its access log.

• Data: IP address, date and time of the request, requested address, HTTP status code and amount of data transferred, referring page, and the browser's user-agent string.
• Purpose: delivering the website, keeping it secure (for example detecting and defending against attacks) and investigating errors.
• Legal basis: our legitimate interest in operating a secure and working website (Article 6(1)(f) GDPR). The data is required for every page request; we do not use it to identify visitors or to create profiles.
• Retention: log files are deleted automatically after no more than 30 days. If a specific entry is needed to investigate a security incident, we keep that entry until the investigation is closed.

Contact and partnership forms

The forms on the Contact and Developers & OEM pages work the same way.

• Data: your name, e-mail address, company (optional), the inquiry type, your message, your confirmation of consent, and the time of submission.
• Purpose: to answer your inquiry and to continue the conversation it starts.
• Legal basis: your consent, given with the checkbox on the form (Article 6(1)(a) GDPR). Providing the data is voluntary, but without a name, an e-mail address and a message we cannot reply.
• Withdrawing consent: you can withdraw your consent at any time through the contact form. We then delete your inquiry. Withdrawal does not affect the lawfulness of processing before it.
• How it is delivered: the website does not store your message. It checks the form, sends its content as a plain-text e-mail to our company mailbox, from which we reply, and keeps no copy on the web server.
• Retention: we keep your inquiry and the correspondence about it in our mailbox only as long as it is needed, and delete it no later than two years after our last exchange, or earlier if you withdraw your consent. If the inquiry leads to a contract, the data needed for that contract is kept for as long as the contract and the applicable legal retention obligations require.

We do not use form submissions for newsletters or marketing, and we do not sell them or pass them on for such purposes.

Protecting the forms from abuse

The forms use a hidden field and a signed timestamp to recognise automated submissions; neither contains personal data. To limit spam and repeated automated submissions, we also store a pseudonymised identifier derived from your IP address (for IPv6, from its network part) with a secret key (a keyed hash; the IP address itself is not stored), together with the times of recent submissions and rejected attempts from that identifier. If many unusual or repeated attempts come from the same identifier, sending through the form is blocked from it for a few hours (at most 24). The content of rejected attempts is not stored either.

• Legal basis: our legitimate interest in protecting the forms and our mailbox from spam and abuse (Article 6(1)(f) GDPR).
• Retention: the identifier and its times are deleted automatically no later than two days after the last attempt.

Who receives the data

• Within our company, only the people who handle inquiries and operate the website have access to the data.
• The website runs on a cloud server operated by a hosting provider that acts as our processor (Article 28 GDPR). The server is located in the European Union, in Frankfurt, Germany.
• Messages sent through the form are delivered and kept by our e-mail service provider, which also acts as our processor.
• We disclose personal data to authorities only where the law requires it.

We do not transfer personal data to countries outside the European Economic Area ourselves, and we do not sell personal data or share it with third parties for their own purposes.

Security

All pages are delivered over an encrypted HTTPS connection. Form submissions are not stored on the web server; they are sent over an encrypted connection to our mailbox. The abuse-protection identifiers are kept outside the public web directory and deleted automatically.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• obtain confirmation of whether we process your personal data and receive a copy of it (Article 15);
• have inaccurate data corrected (Article 16);
• have your data erased (Article 17);
• have the processing restricted (Article 18);
• receive the data you gave us on the basis of consent in a structured, machine-readable format, or have it sent to another controller (Article 20);
• object at any time to processing based on our legitimate interest (Article 21);
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal (Article 7(3)).

To exercise these rights, contact us through the contact form. We respond within one month of receiving your request; for complex or numerous requests this period can be extended by a further two months, in which case we tell you why within the first month. We may ask for information to confirm your identity. Requests are free of charge unless they are manifestly unfounded or excessive.

We do not use automated decision-making or profiling.

Complaints and remedies

If you believe that we process your data unlawfully, please contact us first so that we can resolve the matter. You also have the right to lodge a complaint with a supervisory authority. In Hungary this is:

Nemzeti Adatvédelmi és Információszabadság Hatóság (Hungarian National Authority for Data Protection and Freedom of Information, NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Website: naih.hu

You may also contact the supervisory authority of the EU member state where you live, work, or where the alleged infringement took place. You can also take your case to court. In Hungary, the regional courts (törvényszék) decide such cases, and you may bring the case before the court of your place of residence or stay.

Children

This website is intended for broadcast professionals and companies. It is not directed at children under 16, and we do not knowingly process their data.

Legal framework

This notice is based on Regulation (EU) 2016/679 (General Data Protection Regulation) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information.

Changes to this notice

We update this notice when the way the website processes personal data changes. The current version is always available on this page.

Last updated: 3 November 2026.