Information for visitors to the girbo.hu website and for people who submit the contact form. Controller: Madamit Kft.
This English translation is provided for convenience; the Hungarian version is legally binding. The Hungarian original: Adatkezelési tájékoztató.
Effective from . This notice applies to visitors to the girbo.hu website and to people who submit the contact form. For the resident, family and staff data processed in the GIRBO system (app.girbo.hu), the controller is the care home concerned; that data is covered by the care home's own privacy notice and by the data processing agreement concluded with it (see: Compliance and security).
1. The controller
Name: MADAMIT Korlátolt Felelősségű Társaság (Madamit Kft.)
Registered office: 5100 Jászberény, Réhely utca 39., Hungary
Company registration number: 16-09-015046 · Tax number: 24328726-2-16
2. What data we process, for what purpose and on what legal basis
2.1 Contact form (demo request)
Data: name, email address, the name of your care home or organisation (optional), the text of the message (optional), the time of submission, and the fact that consent was given.
Purpose: to answer your enquiry, arrange a time for a demo, and send you a quote.
Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the checkbox on the form; in the case of a subsequent offer and conclusion of a contract, steps taken prior to entering into a contract (Article 6(1)(b)).
Retention: 12 months from the closure of the enquiry.
Voluntary provision: providing the data is voluntary, but without it we cannot respond to your enquiry.
Technical details: the website's server forwards the content of the form by email to the info@girbo.hu mailbox; we do not use any external form service. The form is protected by an automated bot filter (a hidden field), which does not collect personal data.
2.2 Direct email
If you write to info@girbo.hu, we process the data you provide in your email in order to reply to you, on the basis of your consent or of our legitimate interest (Article 6(1)(f): responding to enquiries), for the period set out in section 2.1.
2.3 Server logs
Data: IP address, time of the request, the page requested, the browser identifier (user agent), the referring page. These are recorded automatically by the hosting provider's server.
Purpose and legal basis: secure operation of the website, troubleshooting, detecting misuse; legitimate interest (Article 6(1)(f)).
Retention: in accordance with the hosting provider's data processing rules.
2.4 Cookies, visitor and advertising measurement, personalised advertising
We use measurement code and cookies only with your consent. On your first visit, a banner lets you choose: “Accept” or “Necessary only”. Without your consent, no measurement code is loaded. You can change your decision at any time using the “Cookie settings” link at the bottom of each page; your choice is stored by your browser (in local storage, not in a cookie).
Google Tag Manager (Google Ireland Ltd.): we use it to load the measurement code (Google Analytics, Google Ads), likewise only after you have given your consent. It does not store any cookies itself.
Google Analytics 4 (Google Ireland Ltd.): measures the number of visits and the route visitors take (which pages they view, where they come from, whether they submitted the contact form), for aggregate statistics and to measure the effectiveness of our ads. Google processes the IP address in shortened form. Cookies: _ga, _ga_* (expiry: up to 2 years). Data retention in Google Analytics: 14 months.
Advertising measurement: we measure the effectiveness of our ads on Google Ads (and, if we use it, Meta, that is Facebook and Instagram) by whether a visitor who clicked on an ad submitted the contact form (conversion). Google Ads cookies: _gcl_au, _gcl_aw (expiry: 90 days). If the Meta Pixel is switched on, the consent banner names it separately; in that case Meta Platforms Ireland Ltd. also receives data (cookie: _fbp, up to 3 months).
Personalised advertising (remarketing): if you consent, Google Ads may also use data about your visit to show you our ads later, on other websites and in Google services, because you have already visited our website. Without your consent, your visit is not used for such advertising.
Legal basis: your consent (Article 6(1)(a) GDPR and section 155(4) of the Eht., Hungary's Act C of 2003 on Electronic Communications); withdrawing your consent does not affect the lawfulness of measurement carried out before the withdrawal.
Transfers to third countries: Google and Meta may also transfer data to the United States; such transfers are based on the EU-US Data Privacy Framework, which both companies have joined.
2.5 Font
The website's font (Plus Jakarta Sans) is loaded from our own hosting; no external provider is contacted for this.
3. Recipients and processors
Hosting provider (operator of the website and of the info@girbo.hu mailbox): Rackhost Zrt. (6722 Szeged, Tisza Lajos krt. 41.; info@rackhost.hu); place of processing: European Union (Hungary).
Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland): visitor and advertising measurement, personalised advertising (section 2.4), only with your consent.
Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland): advertising measurement (section 2.4), only if the Meta Pixel is switched on, and only with your consent.
We do not pass data on to any other organisation unless required to do so by law. Data may be transferred to third countries only for the measurement described in section 2.4, and only with your consent.
4. Your rights
You may request access to your personal data, its rectification or erasure, or the restriction of its processing; you may exercise your right to data portability; and you may object to processing based on legitimate interest. You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before it. You can send your request to info@girbo.hu; we will reply within one month at the latest.
5. Legal remedies
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH, 1055 Budapest, Falk Miksa utca 9-11.; ugyfelszolgalat@naih.hu; www.naih.hu), and you may also bring the matter before a court.
6. Data security
The website is accessible over an encrypted (HTTPS) connection; form submissions arrive by email in the hosting provider's mailbox, which only authorised staff of Madamit Kft. can access.
7. Changes to this notice
We may amend this notice; the version in force at any given time is available on this page, together with the date from which it applies.