Privacy Policy

Last updated: 25 October 2026

1. Data controller

Dr. Parádi József, sole proprietor, 1034 Budapest, Szomolnok utca 20., 3rd floor, door 1, Hungary; tax number 92423578-1-41; sole proprietor register no. 62885249. Contact: budapest@gridresilience.eu.

The Szemere Bertalan Hungarian Law Enforcement History Scientific Society (SZBMRTT) runs its own website at szbmrtt.hu under its own privacy policy. It is a separate controller; we do not pass your order data to it, and writing to the Society does not reach this shop.

2. What we collect

• Order data, given at checkout: e-mail address, individual and company name, billing address, tax number, country, and the order reference.
• Payment records, received from Stripe: amount, currency, payment status, and Stripe's session and payment identifiers. We never receive or store card numbers.
• Invoicing data: what is needed to issue the invoice and report it to NAV, including the tax number you provide.
• Correspondence and delivery logs: e-mails you send us, message identifiers, delivery status, and any error returned by the mail system.
• Technical logs of the website and the delivery service: IP address, user agent, requested path, timestamp, response status.

3. Why we process it

To take and fulfil your order and deliver the dossier (contract); to issue the invoice and report it to NAV (legal obligation); to answer enquiries and re-send failed deliveries (contract or legitimate interest); and to secure the service and prevent fraud (legitimate interest). We do not sell personal data and do not use it for advertising.

4. Recipients and processors

• Stripe — payment processing; card and billing data. For payment data Stripe is a controller in its own right, under its own privacy policy.
• Számlázz.hu — invoicing; it transmits invoice data to the Hungarian tax authority as required by law.
• Google Cloud (europe-west3) — hosting of the delivery service.
• Cloudflare — CDN, DNS and the secure tunnel to our servers.
• Google (Gmail SMTP) — transmission of the dossier e-mail.
• Google Fonts — the web application loads its fonts from Google, which receives your IP address.

Transfers outside the EEA are covered by the European Commission's standard contractual clauses.

5. Retention

Invoices, and the data they rest on, are kept for 8 years as Hungarian accounting law requires. Order and correspondence records are kept for 24 months. Delivery and technical logs are rotated within 30 days. Personal data is deleted when it is no longer needed for these purposes.

6. Your rights

You may request access, rectification, erasure, restriction, portability, or object to processing under the GDPR. Write to budapest@gridresilience.eu. You may lodge a complaint with the Hungarian supervisory authority (NAIH, naih.hu). Where we are required to report invoice data to NAV, that reporting is a legal obligation and the data cannot be erased on request.

7. Security

Traffic is encrypted in transit. Payment card data never reaches our systems. Access to production systems is restricted and logged.

8. Cookies

This site sets no advertising or analytics cookies. The application keeps a local cache so that it can load offline; you can clear it in your browser at any time. Payment takes place on Stripe's own pages, where Stripe's cookie and privacy terms apply.