Ochrana údajov

Ochrana osobných údajov.

Posledná aktualizácia: 20. októbra 2026. This is an English translation for convenience; the Hungarian version is the binding one.

011. The controller

Ramadanovik Danijel e.v. ("AIHívásPro", "we").

Registered seat: 1108 Budapest, Agyagfejtő utca 16., földszint 2. ajtó.

Tax number: 90321937-1-42.

Sole-trader registration number: 59502999.

Contact and data protection questions: info@aihivaspro.hu. Website: aihivaspro.hu.

022. Our two roles

As a controller we process the data of website visitors, demo users, people using the contact form, and our subscribers (businesses) and their contact persons.

As a processor we process the data of people who call our subscribers' phone numbers (for example the customers of a hairdresser or a garage). The controller of that data is the business; we act on its instructions under the data processing agreement annexed to our Terms.

033. Artificial intelligence in calls

Calls are answered by an AI voice assistant, not a person. It says so at the start of the call and announces the recording before the caller speaks (EU AI Act, Article 50).

The assistant processes the caller's speech and answers, books or takes a message based on the business's own data. After the call a summary is prepared for the business.

No automated decision with legal effect is made: a booking is stored only after the caller confirms it, and the caller can always ask to be called back by a person. Call data is not used to train AI models.

044. What we process, why and for how long

Subscribers and contact persons: name, e-mail, phone, company, address, tax number, account settings. Purpose: performing the contract and support. Legal basis: contract (GDPR Art. 6(1)(b)). Kept for 5 years after the contract ends.

Invoices and payment data: legal obligation (Art. 6(1)(c), Hungarian Accounting Act s. 169), kept for 8 years. Card data is handled by Stripe, not by us.

Callers of our subscribers (as processor): phone number, name, booking details, transcript, summary and recording of the call. Purpose: bookings, passing on messages, documenting the call for the business. Kept: recordings 90 days, transcripts and call logs 1 year, or shorter if the business sets so.

Demo users (website and demo phone line): recording, transcript, summary, the caller's number on the phone demo, and the visitor's source without any identifier. Legal basis: legitimate interest (Art. 6(1)(f)). Kept for 90 days. The IP address is kept for up to 2 days for the try limit (2 tries per 24 hours).

Returning demo visitors: only if you accepted cookies, the browser keeps a random identifier so your demo tries can be linked (it contains no personal data). Legal basis: consent (Art. 6(1)(a)). Kept up to 12 months in the browser and 90 days with the demo call. Withdraw any time via "Cookie settings" in the footer.

Call-back request (the buttons on the site, during and after the demo): company name, phone number, the page it came from and, after a demo, the related demo conversation. Purpose: the call back and offer you asked for. Legal basis: steps prior to a contract at your request (Art. 6(1)(b)). Kept for 1 year if no contract follows.

Contact form: name, company, phone, e-mail, message. Legal basis: steps prior to a contract (Art. 6(1)(b)). Kept for 1 year if no contract follows.

Website statistics are anonymous: no personal data, cookie or identifier; the IP address is used only to filter abuse and is not stored.

Correspondence (mail to info@ and our other addresses): to answer and document business contact. Legal basis: legitimate interest (Art. 6(1)(f)) or contract. Kept up to 5 years.

Security and operating logs (logins, administrator actions, the voice assistant's technical log, sent mail and payment notifications): security, troubleshooting and accountability. Legal basis: legitimate interest (Art. 6(1)(f)) and Art. 32. Kept: the voice assistant's technical log 30 days, the rest 1 year.

Backups: daily backups are kept for 14 days, so erased data may remain in a backup for up to 14 days; if a backup is ever restored, erasures requested in the meantime are applied again.

Register of data-subject requests and data breaches (subject masked): legal obligation (Art. 5(2), 12, 33). Kept for 5 years.

055. Recipients, processors and data location

Data is processed on our behalf by the following categories of processors: hosting and server provider (EU); AI-based voice and language processing providers; telephony and SMS provider; e-mail provider; payment provider (Stripe); with consent, an advertising measurement provider (Google).

Some processors may also process data in the United States. Such transfers rely on the EU–US Data Privacy Framework or standard contractual clauses (GDPR Art. 46). The exact list of processors is available on request at info@aihivaspro.hu.

066. Your rights

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent. Write to info@aihivaspro.hu; we answer within one month, after confirming who you are. An erasure removes the call's transcript, summary and recording, at the voice provider too. You may complain to the Hungarian authority NAIH (1055 Budapest, Falk Miksa utca 9–11., www.naih.hu) or go to court.

077. Cookies

aih_consent (180 days, necessary): remembers your cookie choice. App login cookie (30 days, necessary). NEXT_LOCALE (1 year, necessary): the site language you chose. Google Ads cookies only with your consent: without it the Google tag is not even loaded and nothing is sent to Google. The tab's temporary storage remembers where you came from until the tab is closed, without any identifier. aih_vid (local storage, only with consent): a random identifier to recognise a returning demo visitor, up to 12 months. Change your choice any time via "Cookie settings" in the footer.

088. Security and changes

Appropriate technical and organisational measures protect the data: encrypted transfer, restricted, two-factor and logged administrator access, an encrypted key store, regular backups and automatically enforced retention. Data breaches are handled as the law requires (NAIH within 72 hours, data subjects informed where needed). We update this notice when the service changes; the current version is always on this page.