Privacy Policy

CAPSTONE

(Capstone Management Kft.)
www.capstone-m.hu

2026

Purpose of the Privacy Notice

Data Controller Information
Scope of Processed Personal Data

3.1. Data processing related to possible quotation requests carried out on the website

3.2. Data processing related to the registration of contracts concluded with clients, the execution of contracts, and the performance of services

3.3. Data processing for customer service purposes

3.4. Technical data

3.5. Cookies

3.5.1. Purpose of cookies

3.5.2. Strictly necessary, session cookies

3.5.3. Cookies placed by third parties (analytics and tracking code)

Purpose, method and legal basis of data processing
4.1. General data processing principles

4.2. Definitions, terms

Physical storage locations of data
Data transfer, data processing, and the scope of persons accessing the data
Rights of the data subject and possibilities for enforcement

7.1. Right to information

7.2. Right of access of the data subject

7.3. Right to rectification

7.4. Right to erasure

7.5. Right to restriction of data processing

7.6. Right to data portability

7.7. Right to object

7.8. Automated decision-making in individual cases, including profiling

7.9. Right of withdrawal

7.10. Right to turn to court

7.11. Data protection authority procedure

Other provisions

1. PURPOSE OF THE PRIVACY NOTICE

Capstone Management Kft. (hereinafter: service provider, data controller), as data controller, acknowledges the content of this legal notice as binding upon itself. It undertakes to ensure that all data processing related to its activities complies with the requirements set out in this policy, as well as with applicable national legislation and the legal acts of the European Union.

The data protection principles of Capstone Management Kft. are continuously available at www.capstone-m.hu/adatvedelem. Capstone Management Kft. reserves the right to modify this notice at any time. Naturally, it will inform its audience of any changes in due time. Capstone Management Kft. is committed to the protection of the personal data of its clients and partners, and considers it particularly important to respect the right to informational self-determination of its clients. Capstone Management Kft. treats personal data confidentially and takes all such security, technical and organizational measures which guarantee the security of the data.

Capstone Management Kft. sets out its data processing practices below.

2. DATA CONTROLLER INFORMATION

Capstone Management Kft. deletes all emails received by it, together with personal data, no later than 3 years from the provision of the data.

Name: Capstone Management Kft.

Registered office: 1056 Budapest, Váci utca 65. 4th floor 8.
Mailing address: 1053 Budapest, Szép utca 2. 9th floor
Company registration number: 01 09 307959
Tax number: 26210209-2-41
Phone number: +36 70 418 82 48
Email: office@capstone-m.com

If you have any questions or problems related to this notice or the processing of your personal data, you may contact the data controller at office@capstone-m.com.

SCOPE OF PROCESSED PERSONAL DATA

3.1. DATA PROCESSING RELATED TO POSSIBLE QUOTATION REQUESTS CARRIED OUT ON THE WEBSITE

During quotation requests and fee calculations requested through the website, Capstone Management Kft. processes the data recorded in the fields to be filled in for the purpose of preparing the fee calculation, but does not store them.

Full name (mandatory)
Email address (mandatory)
Phone number (mandatory)

In addition to the above, the quotation request form contains the declaration of the data subject regarding the reading and acceptance of the Privacy Notice, and regarding newsletters sent by email, direct emails and targeted online advertisements.

3.2. DATA PROCESSING RELATED TO THE REGISTRATION OF CONTRACTS CONCLUDED WITH CLIENTS, THE EXECUTION OF CONTRACTS, AND THE PERFORMANCE OF SERVICES

Capstone Management Kft. is entitled to process the personal data of its clients on a contractual legal basis, which are related to the contract, its conclusion, registration, and the service. The purpose of data processing may only be necessary for the conclusion, modification, maintenance of the contract, the assessment of claims arising from the contract, or other purposes defined by law.

The data processing of Capstone Management Kft. is based on the conclusion of the contract, while in the case of service requests and requests for information related to the contract, it is based on voluntary consent given by sending the request.

3.3. DATA PROCESSING FOR CUSTOMER SERVICE PURPOSES

Capstone Management Kft. provides information, information and assistance by telephone or by e-mail in the case of questions asked by clients regarding their concluded contracts, or on the initiative of our company, and receives service-related and claim notifications arising from or related to the contracts. Communication conducted for this purpose is not recorded by our company.

Capstone Management Kft. provides information, information and assistance also via the Messenger chat service belonging to the Capstone Management Facebook page in the case of questions asked by clients regarding their concluded insurance contracts, or on the initiative of our company, and receives service-related and claim notifications arising from or related to the contracts. Communication conducted for this purpose is recorded by our company.

3.4. TECHNICAL DATA

Capstone Management Kft. selects and operates the IT tools used during the provision of the service for the processing of personal data in such a way that the processed data:

is accessible to those authorized (availability);
its authenticity and authentication are ensured (authenticity of data processing);
its unchanged nature can be verified (data integrity);
is protected against unauthorized access (confidentiality of data).

Capstone Management Kft. protects the data with appropriate measures against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction.

Capstone Management Kft. ensures the protection of the security of data processing with technical, organizational and organisational measures which provide a level of protection appropriate to the risks arising in connection with data processing.

During data processing, Capstone Management Kft. preserves

confidentiality: it protects the information so that only those who are entitled may access it;
integrity: it protects the accuracy and completeness of the information and the method of processing;
availability: it ensures that when the authorized user needs it, he or she can actually access the desired information, and the tools related to this are available.

3.5. COOKIES

3.5.1. Purpose of cookies

collect information about visitors and their devices;
store the individual settings of visitors, which may be used, for example, when using online transactions, so they do not have to be re-entered;
facilitate the use of the website;
provide a quality user experience.

In order to provide customized service, a small data package, a so-called cookie, is placed on the user’s computer and read back during a later visit. If the browser sends back a previously saved cookie, the service provider managing the cookie has the possibility to link the user’s current visit with the previous ones, but exclusively with regard to its own content.

3.5.2. Strictly necessary, session cookies

The purpose of these cookies is to ensure that visitors can browse the www.capstone-m.hu website fully and smoothly, use its functions, and access the services available there. The validity period of this type of cookies lasts until the end of the session (browsing), and by closing the browser this type of cookies is automatically deleted from the computer or other device used for browsing.

3.5.3. Cookies placed by third parties (analytics and tracking code)

The www.capstone-m.hu website also uses cookies of third parties, such as Google Analytics and Facebook. By using the Google Analytics statistical service, www.capstone-m.hu collects information about how visitors use the websites. The data is used for the purpose of improving the website and enhancing the user experience. By using the Facebook remarketing tracking code, www.capstone-m.hu collects information about which subpages the visitor has visited on the website. The data is used in order to make online advertisements more relevant for the user. These cookies also remain on the visitor’s computer or other device used for browsing, in its browser, until their expiry, or until the visitor deletes them.

4. PURPOSE, METHOD AND LEGAL BASIS OF DATA PROCESSING

4.1. GENERAL DATA PROCESSING PRINCIPLES

The data processing activities of Capstone Management Kft. are based on voluntary consent or legal authorization. In the case of data processing based on voluntary consent, the data subjects may withdraw their consent at any stage of the data processing.

In certain cases, the processing, storage and transfer of a set of provided data is made mandatory by law, about which we inform our clients separately.

We draw the attention of persons providing data to Capstone Management Kft. that if they do not provide their own personal data, it is the obligation of the data provider to obtain the consent of the data subject.

Its data processing principles are in accordance with the applicable legislation on data protection, in particular the following:

Act CXII of 2011 – on the right of informational self-determination and freedom of information (Infotv.); Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) – on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR);
Act V of 2013 – on the Civil Code (Ptk.);
Act C of 2000 – on Accounting; Act LIII of 2017 – on the prevention and combating of money laundering and terrorist financing (Pmt.);
Act CCXXXVII of 2013 – on credit institutions and financial enterprises (Hpt.).

4.2. DEFINITIONS, TERMS

Third party: any natural or legal person, or organization without legal personality, who or which is not identical with the data subject, the data controller or the data processor;

Data subject: any identified or identifiable natural person based on personal data, directly or indirectly;

Personal data: any data relating to the data subject – in particular the name, identification mark of the data subject, as well as one or more pieces of information characteristic of the physical, physiological, mental, economic, cultural or social identity of the data subject –, as well as any conclusion that can be drawn from the data relating to the data subject;

Consent: any voluntary and definite expression of the will of the data subject, which is based on appropriate information, and by which he or she gives his or her unambiguous agreement to the processing of personal data relating to him or her – either fully or covering certain operations;

Objection: the statement of the data subject by which he or she objects to the processing of his or her personal data, and requests the termination of data processing, or the deletion of the processed data;

Data controller: the natural or legal person, or organization without legal personality, who or which alone or jointly with others determines the purpose of the processing of data, makes and executes decisions relating to data processing (including the tool used), or has them executed by a data processor;

Data processing: irrespective of the procedure applied, any operation or the totality of operations performed on the data, thus in particular – collection, recording, registration, systematization, storage, modification, use, querying, transmission, disclosure, alignment or linking, restriction, deletion and destruction of data, as well as – the prevention of further use of data, making photo, audio or video recordings, as well as recording physical characteristics suitable for identifying a person (e.g. fingerprint or palm print, DNA sample, iris image);

Data transfer: making the data accessible to a specified third party;

Disclosure: making the data accessible to anyone;

Data erasure: making the data unrecognizable in such a way that its restoration is no longer possible;

Data destruction: the complete physical destruction of the data carrier containing the data;

Data processing: the performance of technical tasks related to data processing operations, regardless of the method and means used for carrying out the operations, as well as the place of application, provided that the technical task is performed on the data;

Data processor: the natural or legal person, or organization without legal personality, who or which performs the processing of data on the basis of a contract – including a contract concluded on the basis of a legal provision;

Data provider: the body performing a public task which – if the data controller does not publish the data itself – publishes the data provided to it by the data controller on a website;

5. PHYSICAL STORAGE LOCATIONS OF DATA

Your personal data (that is, data that can be associated with your person) may be processed by us in the following way: on the one hand, in connection with maintaining the internet connection, technical data related to the computer used by you, the browser program, the internet address, and the visited pages are automatically generated in our computer system; on the other hand, you may also provide your name, contact details or other data when registering in person at the studio, as well as when you wish to make an appointment or contact us personally during the use of the website.

During the operation of the system, the data technically recorded: the data of the computer of the data subject logging in, which are generated during browsing of the website and which are recorded by the system of www.capstone-m.hu as an automatic result of technical processes. The automatically recorded data are logged automatically by the system at the time of entry or exit, without any separate statement or action by the data subject. This data cannot be linked to other personal user data – except in cases required by law. Only Capstone Management Kft. has access to the data.

6. DATA TRANSFER, DATA PROCESSING, AND THE SCOPE OF PERSONS ACCESSING THE DATA

Hosting provider:
Activity: providing storage space for the storage and operation of the www.capstone-m.hu website, as well as providing multiple email addresses ending with @capstone-m.com.
Registered office: 2040 Budaörs, Baross utca 89.
Website: www.isolutions.hu
Phone number: +36 70 777 6226
Email address: gondolatebreszto@isolutions.hu

7. RIGHTS OF THE DATA SUBJECT AND POSSIBILITIES FOR ENFORCEMENT

The data subject may request information about the processing of his or her personal data, as well as request the rectification of his or her personal data, or – with the exception of mandatory data processing – the deletion, withdrawal, may exercise the right to data portability and the right to object in the manner indicated at the time of data collection, or at the contact details of the data controller indicated above.

7.1. RIGHT TO INFORMATION

Capstone Management Kft. shall take appropriate measures in order to provide the data subjects with all information referred to in Articles 13 and 14 of the GDPR and all information pursuant to Articles 15–22 and 34 in a concise, transparent, intelligible and easily accessible form, using clear and plain language.

7.2. RIGHT OF ACCESS OF THE DATA SUBJECT

The data subject shall have the right to obtain confirmation from the data controller as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: the purposes of data processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, including in particular recipients in third countries or international organizations; the envisaged period for which the personal data will be stored; the right to rectification, erasure or restriction of processing and the right to object; the right to lodge a complaint with a supervisory authority; information on data sources; the fact of automated decision-making, including profiling, as well as meaningful information about the logic involved and the significance and the envisaged consequences of such processing for the data subject. The data controller shall provide the information within a maximum of one month from the submission of the request.