Privacy Policy

This policy describes what personal data Grif Tools Kft. processes when operating the https://www.griftools.com website, for what purpose and on what legal basis, how long it is kept, to whom it is transferred, and what rights you have in this regard.

Griftools acts in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act CXII of 2011 on informational self-determination and freedom of information (Infotv.), and considers this policy binding on itself.

1. The controller

• Name: Grif Tools Kft.
• Registered seat: 3300 Eger, Vécseyvölgy utca 99., Hungary
• Company registration number: 10-09-027554
• Tax number: 13967468-2-10
• Represented by: István Forgács, managing director
• Email: sales@griftools.com
• Phone: +36 20 246 9706
• Website: https://www.griftools.com

For data protection matters please contact us at sales@griftools.com. Griftools has not appointed a data protection officer.

2. What data we process and why

2.1 The project enquiry form

Before submitting the form you confirm with a checkbox that you have read this policy. You may withdraw your consent at any time at sales@griftools.com; withdrawal does not affect the lawfulness of processing carried out before it.

Uploaded technical files. Board data you send us (Gerber, STEP, DXF, ODB++, HPGL) is used solely to assess your enquiry and to design the tooling. We treat it as confidential and we will sign an NDA on request.

2.2 Contact by phone and email

If you contact us by phone or email, we process the contact details you provide and the content of your enquiry in order to answer it and to keep in contact, on the basis of your consent. Data created this way is kept for 1 year after the enquiry is closed. We do not record phone calls.

2.3 Cookies and traffic measurement

The website uses cookies. Strictly necessary cookies are placed on the basis of our legitimate interest; statistical and marketing cookies are placed only with your prior consent, which you give on the cookie banner shown when you first open the site and which you can withdraw at any time.

Traffic measurement tools in use: [TO BE CONFIRMED BY CLIENT: Google Analytics 4 property ID and any other measurement tool].

A detailed list of cookies, their purpose and lifetime is set out in our Cookie Policy.

2.4 Contracts and invoicing

When an order is placed, we process the data required to perform the contract and issue the invoice (name, address / billing details, contact details, details of performance).

• Legal basis: performance of a contract (Article 6(1)(b) GDPR) and compliance with a legal obligation (Article 6(1)(c) GDPR).
• Retention: accounting documents are kept for 8 years under Section 169(2) of Act C of 2000 on accounting.

3. Who we transfer data to

Your personal data is primarily accessible to authorised employees of Griftools. The following parties may access the data as processors, to the extent necessary for their task:

Beyond this we do not disclose your data to third parties and do not make it public. In the event of an official or judicial request we may be obliged to provide data on the basis of a legal obligation; even then we disclose only what is strictly necessary.

4. Data security

Data is stored in password-protected systems with restricted access, transmitted over an encrypted (HTTPS) connection and protected by regular backups. Access is limited to those who need it for their task. Griftools ensures the confidentiality, integrity and availability of the data through organisational and technical measures proportionate to the risk.

5. Your rights

• Right to information and access (Article 15) — you may ask whether we process data about you and, if so, request a copy of it.
• Right to rectification (Article 16) — you may request the correction of inaccurate data and the completion of incomplete data.
• Right to erasure (Article 17) — you may request the deletion of your data, unless processing is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
• Right to restriction of processing (Article 18).
• Right to data portability (Article 20).
• Right to object (Article 21).
• Right to withdraw consent — at any time, without giving reasons; this does not affect the lawfulness of processing before withdrawal.

You may submit your request at sales@griftools.com or by letter to our registered seat. We reply free of charge within 30 days at the latest.

6. Remedies

If you believe that your rights have been infringed, please contact us first at sales@griftools.com — most questions can be resolved fastest that way.

You may also lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Seat: 1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

You may also turn to a court. Proceedings may be initiated before the tribunal with jurisdiction over your place of residence or stay.

7. Changes to this policy

We may amend this policy whenever the scope of processing or the legal environment changes. The version in force is always available on this page, with the date of the last change shown below.

In force from: 25 August 2026