Privacy Notice
Effective from: 01/09/2026
Data controller
Name of the data controller: Ouro Preto Group Kft.
Registered office: 1023 Budapest, Orgona utca 3.
Company registration number: 01-09-402815
Tax number: 32016884-2-41
Email address: info@ouropreto.hu
Telephone number: +36 70 32 74 500
Website: ouropreto.hu
Hereinafter referred to as the Controller.
Purpose of this Privacy Notice
This Privacy Notice explains what personal data the Controller processes in connection with the operation of the Website, the purposes and legal grounds of the processing, the applicable retention periods, and the rights available to data subjects.
Personal data are processed in accordance with Regulation (EU) 2016/679, known as the General Data Protection Regulation or GDPR, and the applicable Hungarian data protection legislation.
Technical data processed when visiting the Website
When a visitor accesses the Website, certain technical information may be generated and processed, including:
IP address
Date and time of the visit
Pages viewed
Browser and device type
Operating system information
Address of the referring website
The purpose of the processing is to ensure the secure and reliable operation of the Website, identify technical errors, prevent misuse and protect the Website against unauthorised activity.
The legal basis of the processing is the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR.
Technical data may be retained by the hosting provider for the period necessary to provide and protect its services, in accordance with its applicable retention policies.
Contact by email
If a visitor contacts the Controller by email, the Controller may process the visitor’s name, email address, the content of the message and any other information voluntarily provided in the message.
The purpose of the processing is to respond to the enquiry, establish a business relationship, prepare an offer and maintain communication.
If the enquiry relates to a potential contract or a request for an offer, the legal basis is Article 6(1)(b) of the GDPR. For other enquiries, the legal basis is the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR.
Personal data provided through email correspondence are retained for 1 year after the enquiry has been closed, unless a contract is concluded or a longer retention period is required by law or necessary for the establishment, exercise or defence of legal claims.
Google Analytics
The Website may use Google Analytics 4 to analyse Website traffic and understand how visitors use the Website.
Google Analytics may process information such as:
Online identifiers
Device and browser information
Approximate geographical location
Pages viewed
Sessions and events
Traffic source
Actions performed on the Website
The purpose of the processing is to measure Website traffic, understand visitor behaviour, improve the content and performance of the Website and prepare aggregated statistics.
The legal basis of the processing is the visitor’s consent pursuant to Article 6(1)(a) of the GDPR.
Google Analytics cookies and measurement functions may be activated only after the visitor has given consent.
Retention period for user level and event level data: 14 months.
Google Analytics measurement ID: -
Google Ads
The Website may use Google Ads conversion measurement and advertising functions to determine which advertisements direct visitors to the Website and what actions visitors perform after arriving.
Google Ads may process cookie identifiers, device identifiers, interactions with advertisements, the time of the visit, pages viewed and conversion events.
The purposes of the processing are to measure advertising performance, optimise advertising campaigns and, where separately enabled and accepted, display personalised or remarketing advertisements.
The legal basis of the processing is the visitor’s consent pursuant to Article 6(1)(a) of the GDPR.
Advertising cookies, conversion tracking and remarketing functions may be activated only after the visitor has given consent.
Google Ads identifier: -
Management of cookie preferences
The Website may use a necessary cookie or similar technology to remember the visitor’s privacy and cookie preferences.
The purpose of this processing is to preserve the visitor’s choice and ensure that the Website respects the selected settings.
Strictly necessary cookies do not require consent. Analytics and marketing cookies may be used only with the visitor’s prior consent.
Consent may be modified or withdrawn at any time through the “Cookie Settings” link available in the footer of the Website.
Data processors and recipients
Squarespace Ireland Limited
Address: Squarespace House, Ship Street Great, Dublin 8, D08 N12C, Ireland
Purpose: Website hosting, technical operation and security.
Privacy Policy: https://www.squarespace.com/privacy
Google Ireland Limited
Address: Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Website analytics, conversion measurement and advertising services.
Privacy Policy: https://policies.google.com/privacy
These service providers may also act as independent data controllers in relation to certain processing activities carried out for their own purposes.
Transfers outside the European Economic Area
The use of Squarespace and Google services may involve the transfer of personal data to countries outside the European Economic Area, particularly the United States of America.
Such transfers are carried out on the basis of appropriate safeguards, including an applicable adequacy decision or the standard contractual clauses adopted by the European Commission.
Rights of data subjects
A data subject has the right to:
Request information about the processing of their personal data
Request access to their personal data
Request correction of inaccurate personal data
Request the deletion of personal data
Request restriction of processing
Object to processing based on legitimate interests
Request data portability where the legal requirements are met
Withdraw consent at any time
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Requests may be sent to: info@ouropreto.hu
The Controller will respond without undue delay and no later than one month after receiving the request, unless an extension is permitted under the GDPR.
Complaints and legal remedies
A data subject may submit a complaint to the Hungarian National Authority for Data Protection and Freedom of Information.
Name: Hungarian National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9 to 11, Hungary
Postal address: 1363 Budapest, P.O. Box 9, Hungary
Email address: ugyfelszolgalat@naih.hu
Telephone number: +36 1 391 1400
Website: https://www.naih.hu
A data subject also has the right to seek a judicial remedy before a competent court.
Automated decision making
The Controller does not carry out automated decision making that produces legal effects or similarly significantly affects visitors based on personal data collected through the Website.
Amendments to this Privacy Notice
The Controller may amend this Privacy Notice if the operation of the Website, the services used or the applicable legal requirements change.
The current version of the Privacy Notice is always available on the Website.
Governing language
This English version is provided for informational purposes. If any difference or inconsistency arises between this version and the Hungarian version, the Hungarian version shall prevail.
