Privacy policy
This policy explains what personal data we collect through this website, why we collect it and what rights you have. It follows the General Data Protection Regulation (EU) 2016/679.
Controller
PHARMA-PLANTA Termelő és Kereskedelmi Korlátolt Felelősségű Társaság (trading as PharmaPlanta), IV. körzet 218., 6763 Szatymaz, Hungary. E-mail: sales@pharmaplanta.com. You can reach us about any data protection matter at this address.
When you send an enquiry
The enquiry form asks for your name, company, e-mail address and message; a telephone number, country and VAT number are optional. We use this data solely to answer your enquiry and to carry out any business relationship that follows from it. The legal basis is Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract.
We also store the date, the machine the enquiry relates to and the IP address the message was sent from. The IP address is kept for a short period to protect the form against automated abuse; the legal basis is Article 6(1)(f) GDPR, our legitimate interest in a functioning website.
Enquiries are kept for as long as the business relationship requires, and thereafter for the retention periods imposed by Hungarian accounting and tax law.
When you subscribe to machine alerts
If you ask to be notified about new arrivals matching your interests, we store your e-mail address and the search criteria you chose. We send a confirmation e-mail first and activate the subscription only when you click the link in it — we never add anyone to a list without that confirmation. The legal basis is your consent under Article 6(1)(a) GDPR.
You can withdraw your consent at any time through the unsubscribe link at the end of every alert e-mail, or by writing to us. Withdrawal does not affect the lawfulness of processing carried out beforehand.
Our record of your contact with us
Enquiries, contact messages and alert subscriptions carrying the same e-mail address are shown together in our administration, so that we can see one customer’s history in one place instead of searching three lists. This creates no new data about you: it is the same records, gathered under one heading.
We use it to answer you, to prepare and follow up quotations, and to keep the commercial record expected of a trading company. Where you have subscribed to alerts, we also write to you when a matching machine is listed, and you can stop that from any message. We do not send unsolicited advertising to people who have merely made an enquiry, and we never pass your details to anybody outside our company.
Enquiries and the correspondence around them are kept for as long as the business relationship may reasonably continue, and where a sale takes place, for the period Hungarian accounting law requires. Alert subscriptions are kept until you unsubscribe.
When you simply browse
We record how often each machine page is opened, so that we know which equipment attracts interest. Pages are normally delivered to you from a cache, so the count is reported by a small request your browser makes once the page has loaded.
For each visit we store the time, the domain of the page you came from, whether you were reading on a phone or on a desktop computer, and a short irreversibly hashed value derived from your IP address and browser. Only the domain of the referring page is kept — never the full address, and never any search words it may contain. The hashed value lets us tell one reader returning twice from two different readers; it cannot be turned back into an address and is not combined with anything else. Visits that do not run JavaScript, which is most automated traffic, are not counted at all.
We keep the last 200 visits for each machine and daily totals for 400 days. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in knowing which of our machines attract interest.
Our web server additionally keeps standard access logs — the address requested, the time, the amount of data transferred, the referring page, the browser and the IP address. These serve security and troubleshooting and are deleted automatically after a short retention period.
Cookies
This website sets no advertising or tracking cookies. WordPress may set a technical session cookie when someone logs in to the administration area, which is not relevant to visitors.
Spam protection
The forms on this site are protected by Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you open a page carrying a form, Turnstile checks in the background whether the request comes from a person or from an automated program. For that check your IP address, information about your browser and device, and your interaction with the page are transmitted to Cloudflare. Turnstile sets no advertising cookies and does not follow you across websites.
We use it because without it these forms receive automated messages daily, which bury real enquiries. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in a working contact channel. The transfer to the United States takes place on the basis of the standard contractual clauses agreed with Cloudflare. Cloudflare’s own privacy notice is published at cloudflare.com/privacypolicy.
Every message is additionally scored on its own content — links, wording, disposable addresses and whether it was submitted by a browser at all. A message that scores badly is filed separately rather than e-mailed to us. No decision with legal effect for you is taken this way, and a message filed in error is released by hand.
Hosting
The website is hosted by Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Geneva, Switzerland, acting as a processor on our behalf. Switzerland is recognised by the European Commission as providing an adequate level of data protection.
Our correspondence travels over the internet. We use transport encryption where the receiving server supports it, but we cannot guarantee end-to-end confidentiality of e-mail. Please do not send us documents you consider highly confidential without agreeing a secure route with us first.
Your rights
You have the right to obtain confirmation of whether we process data about you and to receive a copy of it; to have inaccurate data corrected; to have data erased where there is no longer a lawful reason to keep it; to have processing restricted; to receive the data you provided in a portable format; and to object to processing based on our legitimate interests. Where processing rests on consent, you may withdraw it at any time.
To exercise any of these rights, write to sales@pharmaplanta.com. We will respond within one month.
You also have the right to lodge a complaint with a supervisory authority — in Hungary, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9-11., 1055 Budapest, www.naih.hu.
To exercise any of these rights, write to sales@pharmaplanta.com. We can gather everything we hold about one e-mail address in a single step, and we will answer within one month. If you ask us to erase your data, we delete the enquiry records, the messages and the subscription. Where accounting law obliges us to keep an invoice, that document alone is kept and nothing else.
You also have the right to complain to a supervisory authority. In Hungary this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Budapest.
Changes
We may update this policy when the website or the law changes. The version published here is the one that applies.
Last updated: 17 August 2026