Legal information

Privacy notice – folkem.org

Effective: 11 October 2026 · covers the folkem.org website, the quick question and the AI assistant

This is an English translation provided for convenience. In case of any discrepancy, the Hungarian version prevails.

This notice explains what personal data Folkem Kft. processes when you use the folkem.org website, for what purpose, for how long, and what rights you have. Data processing on the ordering portal (rendeles.folkem.org) is covered by the portal's own privacy notice. This notice is based on the EU General Data Protection Regulation (GDPR, 2016/679/EU) and Hungarian Act CXII of 2011 on informational self-determination (Infotv.).

1. Controller

Company name: FOLKEM Csomagolástechnikai, Nyomdaipari és Szolgáltató Kft. (short: FOLKEM Kft.)
Registered office and postal address: Köntösgát sor 8., 4031 Debrecen, Hungary
Company registration no.: 09-09-007381
Tax number: 12494921-2-09 (EU VAT: HU12494921)
Phone: +36 52 532 380 · +36 70 677 2099
E-mail: [email protected]

Data protection contact: György Margitics · [email protected] · +36 30 296 5212. Under Article 37 GDPR, Folkem Kft. is not required to appoint a data protection officer.

2. In short

You don't need to give any personal data to browse the website, and we don't use advertising or tracking cookies. We only process personal data if you send a question to a colleague (e-mail address and phone number) or register on the ordering portal. Text you send to the AI assistant is processed by an external provider (Google) – please do not include personal data there.

3. Processing in detail

Activity, purpose	Data processed	Legal basis	Retention
Displaying the website, security – serving the pages, fending off attacks	IP address, browser type, time and address of the request (in requests passing through Cloudflare's network)	Legitimate interest – Art. 6(1)(f) GDPR (secure operation of the website)	The website's own web server does not log visits. Cloudflare keeps security logs briefly, under its own rules.
Quick question to a colleague (chat → “Talk to a person”) – answering your question, preparing a quote	E-mail address, phone number, name, company name, the text of the question, and if you choose: your product list and your chat with the AI assistant; the page address; IP address (abuse filtering)	Steps taken at your request prior to entering into a contract – Art. 6(1)(b) GDPR; for abuse filtering, legitimate interest – Art. 6(1)(f)	Until your question is answered and for the duration of the follow-up contact. If no business relationship is established, we delete it no later than 2 years after the last message; earlier if you ask.
Enquiry account on the ordering portal – so you can read the answer in the portal chat	The data given with the quick question; if you set a PIN: the PIN in encrypted, irreversible form	Art. 6(1)(b) GDPR	As above; if you place an order on the portal, as set out in the portal's privacy notice.
Notification e-mail – confirming your question, sending the PIN setup link	E-mail address, name, the text of the question	Art. 6(1)(b) GDPR	The delivery log at the e-mail provider, under the provider's rules.
AI assistant – instant answers about products and ordering	The questions you type and the AI's answers in that conversation; your product list sent with the question; IP address (rate limiting)	Legitimate interest – Art. 6(1)(f) GDPR (fast customer information); you start the service	Folkem's server does not store the conversation. Your browser keeps it until you close the tab. For abuse filtering we keep the IP address for at most 24 hours.
Quote list and convenience settings – so your list and contact details are not lost	Item codes and quantities you add to the list; if you sent a question: e-mail address, phone number, name, company name; your chosen language	Storage strictly necessary to provide the service you requested (Section 155(4) of Hungarian Act C of 2003 on electronic communications)	Stored only in your browser until you delete it (with the browser's “clear site data” function).
Starting an order on the portal (“Continue to the ordering portal”)	The item codes and quantities of your list in the portal address	Art. 6(1)(b) GDPR	As set out in the portal's privacy notice.

Data marked with * are required for the quick question: without them we cannot reply. An image uploaded to the 3D mockup tool is not uploaded to the server; it is processed only in your browser. The footprint and delivery calculators do not process personal data.

4. About the AI assistant

The assistant generates its answers automatically using artificial intelligence. It may be wrong; its answers are not an offer and it does not give prices or lead times.
Folkem's server forwards the text of your questions to the Google Gemini API, which generates the answer (processor, see section 5). Google handles the submitted text under the Gemini API terms.
Please do not send personal data to the assistant (name, phone number, e-mail address). If you need personal assistance, use “Talk to a person”.
The assistant does not make automated decisions with legal effects concerning you and does not carry out profiling.

5. Who can access the data? (processors)

Folkem staff who need it to answer your question or prepare a quote (sales, design). They are bound by confidentiality.
Hosting: the website and the portal run on Folkem's own server operated in Hungary.
Cloudflare, Inc. (USA) – network delivery, DNS, encrypted connection and protection against denial-of-service attacks.
Brevo (Sendinblue SAS, France) – sending notification e-mails.
Google – generating the answers of the Gemini API (AI assistant), only when you send a question to the AI assistant.
Some images and the video on the website are loaded from the folkem.hu server (Folkem's own website).

We only disclose data to authorities where required by law, upon request, and only to the extent necessary for the purpose of the request.

6. Transfers outside the EU

Cloudflare and Google are US-based companies (or members of such groups). Transfers to them take place under the EU–US Data Privacy Framework and/or the standard contractual clauses adopted by the European Commission, which ensure a level of protection essentially equivalent to that in the EU.

7. Security

The website and the portal are only available over an encrypted (HTTPS) connection. Only authorised staff can access the server; portal data is backed up daily, and we apply rate limits against overload and abuse. However, sending data over the internet can never be entirely risk-free.

8. Your rights

Information and access – you can ask what data we hold about you and request a copy (Art. 15 GDPR).
Rectification – you can ask us to correct inaccurate data (Art. 16).
Erasure – you can ask us to delete your data unless we are legally required to keep it (Art. 17).
Restriction – you can ask us to temporarily stop using your data (Art. 18).
Objection – you can object to processing based on legitimate interest (Art. 21).
Data portability – you can ask for the data you provided in a machine-readable format (Art. 20).

Send your request to the contact details above. We reply without delay and within one month at the latest; in justified cases this may be extended by two further months, and we will let you know. Information is free of charge.

9. Remedies

Please contact us first so that we can resolve the issue quickly. You may also lodge a complaint with the supervisory authority:

Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: Falk Miksa utca 9–11., 1055 Budapest, Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Phone: +36 1 391 1400
E-mail, website: [email protected] · www.naih.hu

If you live in another EU member state, you may also complain to the data protection authority there. You may also go to court; at your choice, proceedings may be brought before the court of your place of residence.

10. Applicable law

Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.)
Hungarian Act CVIII of 2001 on electronic commerce services (Ekertv.)
Hungarian Act C of 2003 on electronic communications (Eht.)
Hungarian Act XLVIII of 2008 on commercial advertising (Grtv.)
Hungarian Act V of 2013 on the Civil Code (Ptk.)

11. Changes to this notice

We may update this notice when the service changes. The current version is always available on this page; we will indicate significant changes on the website.