Privacy Policy

Data Protection Policy

Our Commitment to Privacy

This policy outlines how we collect, process, and store your personal data. Personal data refers to any information that can identify you, such as your name, address, email, or usage behavior. This policy applies to all data processing activities related to our core business and online services.

Responsible for Data Processing

Biz Lookup
DIM‑Német Internet Media Kft.
Miklós utca 13.8 em. 42
1035 Budapest
Hungary
service@biz-lookup.com

How We Use Your Data

If you are a customer, business partner, or someone interested in our services, we collect and process your data based on the business relationship we establish with you. The data we process includes all necessary information for contractual purposes or responding to inquiries. Data processing and sharing with third parties are limited to fulfilling contractual obligations, protecting our rights, and complying with legal requirements. We will inform you about what data is required at the point of collection. If third-party service providers assist in delivering our services, their respective privacy policies also apply.

Types of Data We Process:

  • Personal details (e.g., name, address)
  • Payment information (e.g., banking details, invoices)
  • Contact information (e.g., email, phone number)
  • Contract details (e.g., duration, purpose)

Who Is Affected: Prospective clients, business partners, and contracted customers.

Why We Process Your Data: To manage contractual relationships, communicate, respond to inquiries, and conduct administrative operations.

Legal Basis for Processing: Processing is based on contractual necessity (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR), and legitimate business interests (Art. 6(1)(f) GDPR).

Your Rights Under GDPR

As a user, you have the following rights under the GDPR:

  • Right to Access: You may request confirmation of whether we process your data and receive a copy of it.
  • Right to Rectification: You can request correction of inaccurate or incomplete data.
  • Right to Erasure: You have the right to request deletion of your data.
  • Right to Restrict Processing: In certain cases, you can ask us to limit how we use your data.
  • Right to Data Portability: You can request your data in a structured, commonly used format for transfer.
  • Right to Lodge a Complaint: You may file a complaint with the supervisory authority of your residence, workplace, or our registered office.
  • Right to Withdraw Consent: If you previously consented to data processing, you may withdraw your consent at any time.
  • Right to Object: You can object to data processing based on legitimate interest, particularly for marketing or analytics purposes.

To exercise these rights, contact us at the details provided above.

How Long We Keep Your Data

We retain your data only as long as necessary for the stated processing purposes. Unless otherwise specified, your data is deleted when:

  • The processing purpose is no longer applicable, such as after contract termination (Art. 6(1)(a) GDPR).
  • You withdraw your consent, and no other legal basis justifies processing.
  • You object to processing, and there is no overriding reason to continue.

In cases where legal retention periods apply—such as tax or accounting records (up to 10 years) or contract enforcement (up to 4 years)—your data will be retained accordingly. During this period, processing is restricted solely to legal compliance.

Cookies and Website Tracking

Our website uses cookies—small text files stored on your device—to enhance user experience.

Types of Cookies We Use:

  • Session Cookies – Temporary files that expire when you close your browser.
  • Persistent Cookies – Stored for future visits, remembering preferences like language or login status.

Cookie Categories:

  • Essential Cookies – Necessary for website functionality, security, and login status.
  • Analytics and Marketing Cookies – Used to track user behavior and optimize content for advertising and statistics.

Legal Basis for Cookies:

If we require your consent before setting cookies, we rely on Art. 6(1)(a) GDPR. Otherwise, we base cookie use on legitimate interest (Art. 6(1)(f) GDPR) to improve site usability. You can withdraw cookie consent anytime through your browser settings.

Hosting and Security Measures

Our website is hosted by a third-party provider, which may collect browsing data such as:

  • IP addresses
  • Browser and device details
  • Pages visited and session duration

This data is stored in logs to maintain platform security and prevent fraudulent activity.

Processing Purpose: Ensuring website accessibility, troubleshooting, and security monitoring.

Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR).

Content Delivery Network (CDN)

We use a Content Delivery Network (CDN) to optimize website performance by distributing content across globally located servers. CDN usage helps:

  • Improve website loading speed
  • Ensure platform availability during high traffic periods
  • Prevent cyber threats

Potential Data Transfer Risks: If the CDN provider operates outside the European Economic Area (EEA), data transfers may not meet GDPR protections.

Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR).

CDN Provider: Cloudflare, Inc. – Privacy Policy: Cloudflare Privacy Policy

Contacting Us

If you reach out via email, phone, social media, or postal mail, we process the personal data you provide to respond to your inquiries.

Types of Data Processed:

  • Name and contact details
  • Communication content
  • Any data voluntarily provided

Purpose: Handling inquiries, maintaining business communication, and resolving issues.

Legal Basis: Contractual necessity (Art. 6(1)(b) GDPR), legitimate interest (Art. 6(1)(f) GDPR).

User Accounts and Registration

Users may create an account to manage preferences and track orders. When registering, you provide:

  • Name and email address
  • Username and password
  • IP address and login timestamps for security

Your account data can be updated or deleted at any time.

Legal Basis: Contract performance (Art. 6(1)(b) GDPR), legal compliance (Art. 6(1)(c) GDPR).

Payments and Financial Data Processing

For payment processing, data such as:

  • Name and address
  • Banking details
  • Transaction history

is transmitted securely to financial service providers. The Service Provider does not store or access your payment credentials.

Legal Basis: Contract fulfillment (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c) GDPR).

Payment Provider: CatalystPay – Privacy Policy: CatalystPay Privacy Policy

Payment Service Providers

In accordance with our legal obligations or our legitimate interests in efficient, secure, and customer-oriented payment processing, individuals who have entered into a contract or another legal relationship with us may use banks, credit institutions, or additional payment service providers to make payments. The payment service providers we offer process inventory data, including names, addresses, and bank data such as account or credit card numbers, passwords, TANs, verification numbers, as well as contract details and payment recipient information.

The data collected in this context is necessary to facilitate payment processing via the payment service provider. Only the payment service provider we have engaged collects and processes these personal details. At no time do we receive information about your account or credit card details. We are only informed by our payment service provider whether customer payments have been received. Our payment service providers may also transmit customer data to credit agencies in order to verify the payer’s identity and creditworthiness. For this, we refer to the privacy policies and general terms and conditions of the respective payment service providers.

The terms and privacy policies of the respective payment service provider apply. These notices can be found on the website of the respective service provider or within the transaction application. For more detailed information and to exercise your rights regarding withdrawal and access, please refer to the policies of the relevant payment service provider.

Processed Data:

  • Inventory data (e.g., name, address)
  • Usage data (e.g., visited websites, interest in specific topics, access times)
  • Payment data (e.g., bank account details, invoices, payment history)
  • Transaction data (e.g., duration, customer category, contract details)
  • Communication and metadata (e.g., IP address, device or system information)

Purpose of Processing: Efficient, secure, and customer-oriented payment services and payment processing in accordance with contractual agreements

Legal Basis: Contract fulfillment and pre-contractual inquiries, Article 6(1)(b) GDPR, legitimate interest, Article 6(1)(f) GDPR

Withdrawal Options: You may revoke your consent to the use of your personal data at any time with the respective payment service provider. Despite withdrawal, the payment service provider may still be entitled to process, use, and transmit personal data if necessary for contractual payment processing. Regarding the storage and timely deletion of personal data, please refer to the respective payment service provider’s privacy policies.

We use the following payment service providers:

CatalystPay

Service provider: CatalystPay Limited, Office 525, Scottish Provident Building, Donegall Square West, Belfast, BT1 6JH, United Kingdom
Website: https://catalystpay.com/
Privacy Policy: https://catalystpay.com/legal/privacy

Marketing and Advertising Communications

We may use your data for direct marketing via email, phone, or mail. You can opt out at any time.

Legal Basis: Consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).

Web Analytics and User Behavior Tracking

We analyze website traffic using Google Analytics to optimize content. This involves collecting:

  • IP addresses (anonymized)
  • Browsing history and session data
  • Device and operating system details

Analytics Provider: Google Analytics – Google Privacy Policy

Legal Basis: Consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).

Changes to This Policy

We may update this Privacy Policy due to legal, technical, or business developments. Changes will be communicated via email before taking effect. If you do not object within four weeks, the changes are deemed accepted.

This Privacy Policy was last updated in March 2025.