The purpose of this Notice is to set out the data protection and processing principles applied at https://cyberin.hu, and to inform visitors of the Website about how the Controller handles Personal Data collected through the Website and provided by the visitor.

I. Definitions

1.1 Processing: any operation or set of operations carried out on Personal Data, regardless of the procedure applied, including in particular the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of Personal Data.

1.2 Controller: the entity which, alone or jointly with others, determines the purposes and means of the Processing. For the services referred to in this Notice, the Controller is:

Cyber in Systems Kft.
Registered office: 4183 Kaba, Baross Gábor utca 46., Hungary
Tax number: 26328038-2-09
Telephone: +36 70 425 3330
Email: info@cyberin.hu

1.3 Processor: a service provider that processes Personal Data on behalf of the Controller (see Section VII).

1.4 Personal Data: any data or information by which a natural person can – directly or indirectly – be identified.

1.5 User: the natural person who visits the Controller's Website and, in that context, provides Personal Data to the Controller.

1.6 Website: the website https://cyberin.hu, through which the User submits Personal Data to the Controller.

II. Categories of Personal Data processed

2.1 Contact form and request for quotation: The User may request a quotation or further information about the offered products and services by submitting the contact form or request-for-quotation form available on the Website. The form requires the following Personal Data: name, email address, telephone number. Optional fields include: company name, message, area of interest.

2.2 Newsletter subscription: When subscribing to the newsletter, the User provides their name and email address. The subscription is voluntary and may be withdrawn at any time.

2.3 Configurators and calculators: When using the product configurators available on the Website (injection moulding machine, blow moulding, conveyor, cooling demand, LIAD dosing, temperature control unit, robot), in addition to the technical parameters, the User's name, email address and telephone number are recorded so that a tailored quotation can be prepared.

2.4 Download of professional materials (lead magnet): To download free PDF materials linked to blog articles, the User provides their name and email address, and optionally their company name and telephone number. The download link is delivered through a unique, token-based URL valid for 14 days.

2.5 plAstIc AI expert chat: Using the plAstIc plastics-industry AI chat available on the Website requires registration, during which the User provides their name, company name, address, telephone number, email address and password (the latter is stored by the Controller exclusively in an irreversibly encrypted form). Registration is completed by email confirmation. When using the service, the full content of the chat conversations – the questions asked, the AI's answers and any uploaded images – is logged and may be reviewed by the Controller's staff for the purpose of providing, quality-assuring and improving the service; the Controller may also use the conversations – including by means of automated, AI-based analysis – for sales follow-up purposes (e.g. contacting the User personally about equipment needs raised in the chat). The User gives their express consent to this during registration by ticking the consent checkbox; without it the service cannot be used. The Controller keeps a usage record to enforce the daily question quota. The legal basis of the processing is the User's consent and contractual necessity for providing the service.

2.6 Cookies: The Website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics places a small data file (a “cookie”) on the User's device in order to analyse use of the Website. The Website requests consent for the use of cookies on the first visit (see Section VIII).

III. Purposes and lawful basis of Processing

3.1 The purposes of Processing carried out by the Controller:

a) identifying the User and maintaining contact with the User;
b) handling and responding to requests for quotation and other enquiries;
c) sending the newsletter on the basis of the User's prior consent;
d) delivering professional materials (PDF) to the User – sending the token-based download link by email;
e) statistical analysis of Website traffic (cookie-based);
f) AI-assisted content generation and customer-service support (see Section VII/2).

3.2 When using the contact form, the request-for-quotation form and the newsletter sign-up, the User provides Personal Data voluntarily. The lawful basis for Processing is the User's prior consent (Article 6(1)(a) GDPR).

3.3 The lawful basis for processing the IP address and cookies recorded when the Website is visited is the User's consent (provided by accepting the cookie consent banner). For cookies strictly necessary for the operation of the Website, the lawful basis is the Controller's legitimate interest (Article 6(1)(f) GDPR).

3.4 Personal Data may be disclosed to third parties only with the User's prior, express consent, with the exception of transfers to the Processors expressly named in this Notice.

IV. Principles and manner of Processing

4.1 The Controller processes Personal Data in accordance with the principles of good faith, fairness and transparency, in compliance with the applicable laws and the provisions of this Notice.

4.2 The Controller uses Personal Data only for specified, explicit and legitimate purposes. The categories of Personal Data processed are proportionate to the purpose of Processing and shall not exceed it.

4.3 The Controller ensures the security of Personal Data and implements appropriate technical and organisational measures to protect the data processed, preventing accidental loss, unlawful destruction, unauthorised access, use or alteration.

V. Duration of Processing

5.1 Personal Data submitted via the contact form and the request-for-quotation form are stored by the Controller for a maximum of 5 years, after which they are erased. If a contract is concluded, the Controller continues to process the data necessary for performance of the contract beyond this period.

5.2 Data provided when subscribing to the newsletter are processed by the Controller until consent is withdrawn (until unsubscription).

5.3 The retention period for the IP address and the validity period of cookies is no more than 2 years.

5.4 The plAstIc AI chat account data and the logged conversations (including uploaded images) are retained by the Controller for as long as the account exists. The User may request the deletion of their account at any time at info@cyberin.hu; upon deletion of the account, all conversations and uploaded images are permanently erased.

VI. Rights of the User

6.1 Right of access: The User may request the Controller to confirm whether their Personal Data are being processed and, if so, to provide access to them. Requests for information may be submitted to info@cyberin.hu.

6.2 Right to rectification: The User may request rectification or amendment of their processed Personal Data, as well as the completion of incomplete data.

6.3 Right to erasure: The User may request the erasure of their Personal Data. Erasure may be refused where the Processing is authorised by law or is necessary for the establishment, exercise or defence of legal claims. Once erased, the data cannot be restored.

6.4 Right to restriction: The User may request restriction of the Processing of their Personal Data where they contest the accuracy of the data, where the Processing is unlawful, or where the data are needed for the establishment, exercise or defence of legal claims.

6.5 Withdrawal of consent: The User may withdraw consent at any time. Withdrawal does not affect the lawfulness of Processing carried out before the withdrawal. In the case of the newsletter, unsubscription is performed via the link contained in the email.

6.6 Right to data portability: The User may request the Controller to provide the Personal Data the User has supplied in a structured, commonly used and machine-readable format.

VII. Processing on behalf of the Controller

7.1 The Controller engages the following Processors to carry out its activities:

VII/1. Infrastructure and hosting providers

a) Hosting / server operator: BlazeArts Kft. (Frospi / Aruba Cloud) (6090 Kunszentmiklós, Damjanich u. 36/a., Hungary) – hosting of the Website, the database and the uploaded files (images, PDF documents). Data are stored on servers located within the European Union.
b) Automation platform: Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus) – running n8n automation workflows (newsletter dispatch, notifications, and the plAstIc AI chat workflow). Only the data necessary for the execution of the workflow are transferred (name, email address, content of the request for quotation; in the case of the plAstIc chat: the questions, the uploaded images and a pseudonymous session identifier).
c) CAPTCHA service: Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) – Cloudflare Turnstile CAPTCHA used for spam and bot protection. The service does not use cookies and does not track users; it solely verifies the authenticity of the request.

VII/2. Artificial intelligence (AI) providers

The Controller uses AI-based tools to produce the professional content published on the Website (blog articles, case studies, product descriptions) and to support its internal business processes. The following AI providers are engaged:

a) Anthropic, PBC (548 Market St, San Francisco, CA 94104, USA) – Claude large language model. Use: content generation, drafting and editing of professional texts, support for software development tasks.
b) OpenAI, LLC (3180 18th St, San Francisco, CA 94110, USA) – ChatGPT large language model. Use: content generation, drafting of professional articles, translation.
c) DeepL SE (Maarweg 165, 50825 Köln, Germany) – DeepL machine translation. Use: translation of Hungarian content of the Website into English. Data are processed on servers located within the European Union.
d) plAstIc AI chat processing: the questions asked in the plAstIc chat and the uploaded images are transferred to Anthropic, PBC (answer generation, image analysis) and OpenAI, LLC (semantic search) in order to produce the answer. The transfer uses a pseudonymous session identifier; the User's registration data (name, company name, address, telephone number, email) are not passed to the AI providers.

Content generation and machine translation (points a–c) use only general industrial and technical information; no Personal Data provided by the User are fed into them. When using the plAstIc chat (point d), the content the User types into the conversation or uploads as an image is processed — please do not include personal data in the chat that is not necessary for answering your question.

VII/3. Analytics, advertising and CRM

a) Analytics and advertising conversion: Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Google Analytics 4 web analytics, Google Ads conversion tracking. The IP address is anonymised.
b) CRM system: Odoo S.A. (Chaussée de Namur 40, 1367 Grand-Rosière, Belgium) – customer relationship management, recording of leads and requests for quotation. The User's name, email address, telephone number and the content of the request are recorded.
c) Live chat: Tawk.to Inc. (187 East Warm Springs Rd, Las Vegas, NV 89119, USA) – the live chat service available on the Website. Any data voluntarily provided by the User during the chat session are recorded. If the User browses the Website while signed in to the plAstIc AI chat service, the live chat automatically receives the User's name, company name and email address so that customer service can assist them as an identified customer rather than an anonymous visitor.

7.2 Processors do not take independent decisions and may act only within the framework of the legal relationship with the Controller and in accordance with the instructions received.

7.3 Processors may engage further processors only with the Controller's authorisation.

7.4 Transfers to third countries: Some of the Controller's Processors (Google LLC, Anthropic PBC, OpenAI LLC, Tawk.to Inc., Cloudflare Inc.) operate in the United States of America. The lawful basis for the EU–US data transfer is the EU–US Data Privacy Framework (DPF) adequacy decision (Commission Implementing Decision (EU) 2023/1795), under which these providers ensure an adequate level of data protection.

VIII. Cookies

8.1 The Website uses cookies in order to improve the user experience and to analyse traffic. A cookie is a small data file stored by the browser on the user's device.

8.2 Categories of cookies used on the Website:

Strictly necessary cookies: required for the basic operation of the Website (e.g. session identifier). The Website cannot function properly without these. Lawful basis: legitimate interest.
Statistical / analytics cookies (Google Analytics): collect anonymous statistics about Website use (visits, page views, traffic sources). The IP address is anonymised. Validity period: up to 2 years. Lawful basis: consent.

8.3 On the first visit, the Website displays a banner informing the User about the use of cookies. The User can choose:

“Accept” – statistical cookies are also loaded;
“Necessary only” – only the cookies strictly necessary for operation are active, Google Analytics is not loaded.

8.4 Consent may be withdrawn at any time via the browser's cookie settings (by deleting the stored cookies); the Website will then display the information banner again.

IX. Remedies and complaints

9.1 Any questions or comments concerning the Processing of Personal Data may be addressed to the Controller's staff at info@cyberin.hu.

9.2 The User may submit a complaint regarding the Processing directly to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c., Hungary
Telephone: +36 (1) 391-1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

9.3 If the User's rights are infringed, the User may bring an action before the court. Such proceedings fall within the jurisdiction of the regional court (törvényszék). The action may be brought – at the User's choice – before the regional court of the User's place of residence or place of stay.

Kaba, 15 April 2026
Cyber in Systems Kft.

Privacy Policy