PROSPECT Engineering Services Ltd. processes personal data solely to respond to enquiries, discuss service requirements, assess professional partner applications and prepare for potential cooperation. We request only the information necessary for these purposes and do not use it to send unsolicited marketing communications.
1. Data controller
2. Overview of processing activities
| Activity | Data and purpose | Legal basis | Retention |
|---|---|---|---|
| Contact and proposal requests | Name, company name, email address, telephone number, area of interest and message content. We use this information to respond, discuss professional requirements and, where applicable, prepare a proposal. | Article 6(1)(b) GDPR: steps taken at the data subject's request before entering into a contract. For business communications not aimed at entering into a contract, Article 6(1)(f) GDPR: legitimate interest. | Up to 12 months after the enquiry is closed. If a contract is entered into, related records are retained for the period required by applicable law. |
| Expert partner applications | Name, company name, email address, telephone number, discipline, cooperation model, professional introduction and any voluntarily uploaded CV, reference or qualification document. We use this information to assess professional suitability and potential project-based cooperation. | Article 6(1)(b) GDPR: steps taken at the data subject's request before entering into a contract. | Up to 12 months from submission. If cooperation is established, contractual and statutory retention periods apply. |
| Direct email or telephone enquiries | Contact details voluntarily provided by the enquirer and the content of the communication. We use the information to respond and arrange any necessary follow-up. | Article 6(1)(b) or (f) GDPR, depending on the nature of the enquiry. | Up to 12 months after the enquiry is closed, unless a contract or legal obligation requires longer retention. |
| Technical and security logging | IP address, timestamp, requested page, browser and device information. We use this data to operate the website securely, troubleshoot errors and prevent misuse. | Article 6(1)(f) GDPR: legitimate interest. | Normally up to 30 days, or for the period necessary to investigate a security incident. |
Fields marked as required are necessary for us to process the relevant form. We do not use automated decision-making or profiling.
3. File uploads and special-category data
The partner application form allows applicants to upload a CV, reference or professional qualification document. Please provide only information necessary for professional assessment. Do not upload health data, a criminal-record certificate, copies of identity documents or other special-category personal data unless we subsequently request it for a specified purpose and on an appropriate legal basis.
4. Recipients and service providers
Personal data may be accessed only by PROSPECT personnel and contributors who need it to handle the relevant enquiry or application. We use the following categories of service providers:
- website hosting providers;
- email service providers;
- FormSubmit, a technical form-delivery service that forwards submitted data to the controller by email. According to the provider's documentation, form submissions are retained for up to 30 days, while uploaded files are not retained in its archive. Further information is available in the FormSubmit privacy terms;
- where necessary, legal, accounting or IT advisers and authorities acting under applicable law.
Some technical services may process data outside the European Economic Area. Any such transfer must take place in accordance with Chapter V of the GDPR and be covered by appropriate safeguards.
5. Data security
The controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. Access is limited to persons who require the data to perform their duties.
6. Your rights
You may request information about and access to your personal data, ask us to correct or erase it, request restriction of processing and, depending on the legal basis, object to processing or exercise your right to data portability. Requests may be submitted to info@prospect-services.com. We respond without undue delay and normally within one month.
7. Complaints and legal remedies
If you believe that your personal data has been processed unlawfully, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
You may also seek a judicial remedy, including before the competent court of your habitual residence.
8. Cookies and external services
In addition to the technical solutions required for operation, this website uses Google Analytics only with the visitor's prior consent. The service helps us compile aggregated statistics, including the number of visits, pages viewed, device types and the approximate geographic origin of visits. Analytics cookies may be rejected or disabled later at any time through the cookie settings. FormSubmit may apply its own security and anti-spam measures when a form is submitted.
9. Changes to this notice
The controller may update this notice following changes in law, service providers or processing activities. The current version is always available on this page.
Effective date: 21 July 2026.