EVEREST.GREEN – PRIVACY POLICY AND DATA MANAGEMENT NOTICE

Effective from: April 21, 2025

1. Introduction

This Privacy Policy provides an overview of the data processing activities conducted through the website www.everest.green (hereinafter: the “Website”) and informs users (data subjects) about their rights and available remedies.

The Website is operated by Everest Business Services Kft. (registered office: 1051 Budapest, Arany János u. 9., e-mail: info@everest.hu, hereinafter: the “Data Controller”), who declares that the processing of personal data is carried out in accordance with the applicable Hungarian and European legislation, in particular Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Info Act).

2. Definitions

The terms used in this Privacy Policy shall be interpreted as defined under the GDPR and Info Act, especially:

Personal data: any data relating to an identified or identifiable natural person.
Data subject: the natural person whose personal data is processed.
Data processing: any operation performed on personal data, whether or not by automated means.
Data controller: the entity that determines the purposes and means of data processing.
Data processor: an entity that processes data on behalf of the controller.
Consent: the freely given, specific, informed, and unambiguous indication of the data subject’s agreement.

3. Purpose and Legal Basis of Data Processing

The purpose of data processing on the everest.green website includes:

responding to contact or callback requests,
providing personalized energy consultancy,
preparing commercial offers,
client relationship management and statistical analysis,
enhancing user experience and improving services,
marketing communications (with consent),
fulfilling legal obligations.

Legal bases for processing:

the data subject’s voluntary consent (Art. 6(1)(a) GDPR),
performance or preparation of a contract (Art. 6(1)(b)),
the Data Controller’s legitimate interest (Art. 6(1)(f)),
compliance with legal obligations (Art. 6(1)(c)).

4. Scope of Personal Data Processed

The following personal data may be collected via the contact form:

Full name (first and last name),
Email address,
Phone number,
Type of customer (business / private individual),
Company name (optional),
Message content,
Consent checkbox.

Additionally collected data may include:

IP address and browser information (for technical reasons),
Cookie identifiers (e.g. Google Analytics, Meta Pixel – see Section 9).

5. Newsletter Service

Subscription to our newsletter is voluntary. By subscribing, the user consents to:

receiving regular updates on our services, news, and events,
receiving personalized commercial offers via email.

Users may unsubscribe at any time using the link at the bottom of each email or by contacting us at info.en@everest.green.

6. Duration of Data Storage

Contact form data is stored for up to 12 months from the last interaction, or until consent is withdrawn.
Newsletter data is retained until unsubscription.
Data subject to legal obligations is stored for the duration required by applicable laws.

7. Access to Data and Data Transfers

Only designated employees of the Data Controller and authorized data processors have access to personal data, including:

website developers and hosting providers (e.g. Selo, Netlify),
CRM and customer support platform providers (e.g. Hubspot, Pipedrive),
marketing platforms (e.g. Google, Meta),
accounting firms (if applicable).

The Data Controller does not share personal data with third parties for marketing purposes without the data subject’s explicit consent.

8. Data Security

The Data Controller takes all necessary technical and organizational measures to ensure the security of personal data, including:

secure data transmission (SSL),
password-protected access,
access control based on user roles,
regular backups,
system audits.

9. Cookies and Tracking Technologies

The Website uses cookies for operation and analytics purposes. Types of cookies used:

Essential cookies – e.g. for language settings, form handling,
Analytics cookies – e.g. Google Analytics for traffic statistics,
Marketing cookies – e.g. Meta Pixel for retargeting.

Visitors are informed about cookie use upon first access and can manage preferences. Cookie settings can be modified via the browser at any time.

10. Rights of Data Subjects

Data subjects have the right to:

request information about data processing,
request rectification or deletion of their data,
request restriction of processing,
object to data processing,
request data portability,
file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
Address: 1055 Budapest, Falk Miksa utca 9-11.
Website: www.naih.hu

11. Contact and Legal Remedies

For any inquiries or complaints regarding data protection, please contact:

Everest Business Services Kft.
1051 Budapest, Arany János u. 9.
E-mail: info@everest.hu

12. Final Provisions

The Data Controller reserves the right to unilaterally amend this Privacy Policy at any time. Any changes will be published on the Website.

This Privacy Policy is governed by Hungarian law. For all matters not covered herein, the provisions of the GDPR and the Info Act shall apply.