Privacy notice
This notice explains what personal data we process through balagedrone.hu and in the course of our drone services, for what purpose and for how long, and what rights you have.
1. The controller
| Name | TBL Support Services Kft. — operator of the Balage Drone Services brand |
|---|---|
| Registered seat | 1196 Budapest, Batthyány utca 57., Hungary |
| Company registration number | 01-09-311156 |
| VAT number | 26269416-2-43 |
| info@balagedrone.hu | |
| Phone | +36 20 454 6824 |
| Website | https://balagedrone.hu |
No data protection officer has been appointed, as the nature of the processing does not require one. You can raise any question about data processing at the contact details above.
2. What data we process and why
2.1 Contact form
Data given on the website contact form: name, email address, phone number (optional), the message text.
- Purpose: answering your enquiry, quoting, preparing the service.
- Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR), or for general enquiries our legitimate interest (Article 6(1)(f) GDPR) in answering messages sent to us.
- Retention: 1 year from the closure of the enquiry, unless a contract is concluded, in which case section 2.3 applies.
2.2 Contact by email and phone
If you write or call directly, we process the contact details you provide and the content of the correspondence. Legal basis: pre-contractual steps or legitimate interest. Retention: as above. We do not record phone calls.
2.3 Contract and invoicing data
For an order, the data needed for the contract and invoicing: name, company name, seat or address, VAT number, contact person and their details, and details of the surveyed area.
- Legal basis: performance of the contract (Article 6(1)(b) GDPR) and, for accounting documents, compliance with a legal obligation (Article 6(1)(c) GDPR; Section 169(2) of Act C of 2000 on Accounting).
- Retention: 8 years for accounting documents.
2.4 Drone imagery
During a survey, aerial imagery (photo, video, thermal) is captured of the area covered by the assignment. The purpose is specifically to carry out the commissioned survey; it is not directed at observing people. It may nevertheless happen that a person, a vehicle or a number plate appears incidentally in the footage.
- Purpose: producing the commissioned survey, model, map and report.
- Legal basis: performance of the contract with the client (Article 6(1)(b) GDPR); for incidentally captured data, legitimate interest (Article 6(1)(f) GDPR), as the survey cannot technically be carried out without recording the area. Incidental footage is not analysed, not published and not combined with other data.
- Retention: 1 year after the project closes, after which it is deleted, unless the parties agree otherwise.
- Marketing use: footage is published as a reference only with the client's separate, prior consent (Article 6(1)(a) GDPR); consent can be withdrawn at any time.
Flights are carried out in accordance with the applicable aviation and drone operation rules.
2.5 Property security (site surveillance) service
Where a drone service involves camera surveillance for property protection, the operator of the surveyed site is the controller and we act as a processor under a separate written data processing agreement. In such cases the purpose and legal basis of the surveillance, the retention period of the footage and access rights are set out in the agreement with the client, and the client is responsible for informing data subjects and for the warning signs required by law. We do not accept assignments aimed at surveilling third-party property.
2.6 Fawn rescue
For the voluntary, free fawn rescue flights before mowing we process the reporter's name, contact details and the location of the area, solely to arrange the flight, on the basis of legitimate interest. This data is deleted after the end of the season. The thermal footage serves to locate wildlife, not to observe people.
3. Cookies and statistics
Cookies that are not necessary for the website to work are used only with your consent. On the banner shown when you open the site you choose Accept or Decline; your choice is stored in your browser's local storage (the ga_consent key) so that we do not ask again on every visit. You can change your choice at any time via the Cookie settings link in the footer.
Without consent the Google Analytics code does not load at all, so no statistical cookie is created.
| Cookie / storage | Purpose | Legal basis | Duration |
|---|---|---|---|
ga_consent (localStorage) | Remembering your cookie decision | Legitimate interest — respecting your choice | Until you clear it in your browser |
_ga, _ga_<id> | Google Analytics 4 — anonymised visit statistics (with IP anonymisation) | Consent (Article 6(1)(a) GDPR) | Up to 2 years |
You can read more about Google Analytics data processing in the Google Privacy Policy.
4. Who has access to the data (processors)
We do not sell your data and do not pass it to third parties for marketing. The following processors are used to run the service:
| Processor | Activity | Data concerned |
|---|---|---|
| DotRoll Kft. 1148 Budapest, Fogarasi út 3-5. support@dotroll.com | Hosting and domain services | Technical data arising from serving the website (e.g. server logs) |
| Web3Forms (Web3Creative) | Delivering the contact form by email | Name, email address, phone number and message submitted on the form. The provider stores submissions for up to 3 years; its infrastructure may be located outside the EU, with transfers based on the European Commission's standard contractual clauses (SCC). |
| Google Ireland Ltd. | Google Analytics (with consent) and the embedded Google Map on the fawn rescue page | Anonymised visit statistics; loading the map connects your browser to Google servers |
| Microsoft | Email (Microsoft 365) | The content of email correspondence with us |
| Laissez Faire Kft. | Accounting | Invoicing and contract data |
We may disclose data on the basis of a legal obligation in response to an official request.
5. Data security
Data is handled on password-protected devices and accounts; footage and processed material are stored only for as long and to the extent needed to provide the service. Only authorised staff of the controller have access. The website is served over an encrypted (HTTPS) connection.
6. Your rights
- Access: you may ask whether we process data about you and, if so, what.
- Rectification: you may ask for inaccurate data to be corrected and incomplete data completed.
- Erasure: you may ask for your data to be deleted where the purpose has ceased or you have withdrawn consent and there is no other legal basis.
- Restriction: you may ask for processing to be restricted, for example while you contest the accuracy of the data.
- Objection: you may object to processing based on legitimate interest.
- Data portability: data processed by automated means on the basis of consent or a contract can be provided in a machine-readable format.
- Withdrawal of consent: consent may be withdrawn at any time; this does not affect the lawfulness of processing before withdrawal.
You can send your request to info@balagedrone.hu or the postal address above. We respond within one month; where justified this may be extended by a further two months, and we will tell you the reason for the extension.
7. Remedies
If you believe your data has been handled unlawfully, please contact us first — most questions are resolved fastest that way. You may also lodge a complaint with the supervisory authority or go to court.
Court proceedings fall within the competence of the regional court; you may also bring the case before the court of your place of residence or stay.
8. Changes to this notice
We may amend this notice whenever our services or the legal environment change. The version in force is always available on this page; the effective date above shows when it was last updated.