Legal information

Privacy Policy

How we handle the personal data you provide on this website — what we collect, for what purpose, how long we keep it, and what rights you have.

Last updated: August 2026

Data controller

The data controller for personal data provided on the arworks.hu website (and on the arworks.com domain, which redirects to it) is ARworks (registered office: 1012 Budapest, Várfok utca 3–5.; mailing address: 1053 Budapest, Királyi Pál utca 18.).

For data protection questions, you can contact us at office@arworks.hu.

What data we process and why

We only request and store the data needed to respond to your inquiry or to provide our services. The following processing activities take place on this website:

Contact requests and the "Start a Project" form — name, email address, phone number, company name and a description of the project. Purpose: responding to your inquiry and preparing a quote. Legal basis: taking steps at your request prior to entering into a contract, and our legitimate interest in maintaining business contacts.
AI Experts forms — the task description and parameters you enter. Purpose: producing an automated professional analysis. Legal basis: your consent, which you give by submitting the form.
Newsletter — your email address and your chosen topics and frequency. Purpose: sending our professional newsletter. Legal basis: consent, confirmed through double opt-in, which you can withdraw at any time.
Website use — technically necessary cookies and aggregated visitor statistics that cannot be linked to individuals. For details, see our Cookie Policy.

AI processing

The AI Experts and the site chat forward the text you enter to the configured AI provider (currently: DeepSeek) for analysis. Please do not enter any trade secrets, personal data or other confidential information that you do not want to be transferred to an external provider.

The analysis produced by the AI is an automated opinion provided for information only: it does not constitute an offer and has no legal effect on you. You can always ask to discuss it with a person — read more about this on our AI Transparency page.

Data transfers and data processors

We do not disclose your data to third parties for marketing purposes, and we do not sell it. For transfers outside the European Economic Area, the European Commission's Standard Contractual Clauses (SCC) ensure an appropriate level of protection.

Hosting and infrastructure provider (European data center) — operation of the website and the database.
AI provider (currently: DeepSeek) — solely to analyze the text entered into the AI features. Its data centers are in China, outside the European Economic Area.
Email and newsletter delivery service — sending replies to inquiries and delivering the newsletter.

How long we keep your data

Contact and quote requests: for 2 years after the inquiry is closed or, if a contract is concluded, for 5 years after the contract ends.
AI Experts forms: for as long as needed to produce the analysis and to protect the system against abuse, but no longer than 90 days.
Newsletter: until you unsubscribe or withdraw your consent.
Accounting records: for 8 years, as required by law.

Your rights

Under the General Data Protection Regulation (GDPR), you may request access to your personal data, its rectification or erasure, or the restriction of its processing; you may object to the processing; and you may request data portability. Where processing is based on consent, you may withdraw your consent at any time — this does not affect the lawfulness of processing carried out before the withdrawal.

You can submit your request to office@arworks.hu; we will respond within 30 days at the latest.

If you believe that our processing of your data is unlawful, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11., ugyfelszolgalat@naih.hu) or take the matter to court.

Data security

The website is served over an encrypted (HTTPS) connection. Only identified, authorized members of our staff can access the database; the AI providers' API keys are kept exclusively in the server's environment variables and are never stored in the database. The phone number shown on the website is sent to the browser in encoded form, so automated address-harvesting bots cannot read it.