Privacy notice

1. Controller and contact

Controller: Future Meditech Zrt. Registered office: 6725 Szeged, Lékai utca 6., Hungary. Contact for data protection enquiries: Dr. Kisari Krisztián. Email: info@future-meditech.com.

2. Contact and quotation requests

The purpose is to respond to enquiries, prepare demos or quotations and discuss cooperation. The form requests a name, email address, topic, enquiry purpose and message; institutional enquiries also require an organisation. Package, venue, participant count, preferred date and existing equipment are optional. The language and the page containing the form are also included in the message.

Providing data is voluntary, but the online form cannot be submitted without required fields. You can also email us directly. Please do not submit patient data, medical records or unnecessary personal data about others. Contacting us does not subscribe you to a newsletter.

Proposed legal bases: GDPR Article 6(1)(b) for a natural person’s request preceding their own contract; Article 6(1)(f) for organisational contacts and other enquiries, based on the legitimate interest in handling enquiries and business communications. Final classification and the balancing assessment remain to be completed.

For closed enquiries that do not result in a contract, we retain the data for six months after the last substantive contact or closure of the enquiry, whichever is later, then delete it unless a separate, documented legal basis requires further retention. In that case, the purpose and applicable retention period are recorded separately. Where a contract is concluded, separate rules apply to the associated contractual and accounting processing.

3. Security and technical operation

To prevent abuse and duplicate messages, the sending service processes technical identifiers, timestamps, sending status and hashes of the IP address and form contents. These hashes are not automatically anonymous. The full message is not stored in this technical database, but is transmitted to the email system.

Attempt records have a deletion threshold of one hour; duplicate-detection records have a threshold of seven days. The current service removes expired records at the next processing operation. Separate hosting, email and backup logging and retention must be specified after providers are confirmed. Proposed legal basis: GDPR Article 6(1)(f), the legitimate interest in website and email security, with a documented balancing assessment.

4. Browser storage and external content

The current version sets no analytics or advertising cookies and includes no external tracking code. Images and fonts are served from local site files. On language switching, the form draft is saved in browser session storage: the new page restores it within one minute and removes the stored copy on loading. Any remaining session data is cleared when the browser session ends.

Language-switch storage preserves entries during the user-requested action; its proposed GDPR basis is the legitimate interest in functional operation, subject to final assessment. Before adding external videos, analytics, newsletters or new storage features, this notice and any necessary choice controls must be updated.

5. Access, providers and transfers

The website is operated by Future Meditech Zrt. According to the company, data associated with its own website operation is stored in Hungary. Enquiries are handled by authorised staff; external administrators or other external collaborators are not given access.

Email service: Microsoft 365 Business, accessed through Outlook. Website enquiries are delivered as emails to this system. Processing by Microsoft as a service provider is distinct from access by company staff; having no external collaborators does not mean that the email provider does not process data.

Still to be verified against the subscription documents and Microsoft 365 administrative settings: the contracting Microsoft legal entity and address, the actual email data storage region, and any transfers outside the EEA and their safeguards. The statement about website data storage in Hungary does not automatically extend to Microsoft cloud services.

6. Your rights and remedies

Subject to applicable conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. For any future consent-based processing, consent may be withdrawn without affecting prior lawful processing. Send requests to info@future-meditech.com.

A response is normally due within one month; any justified extension must be communicated within that period. You may complain to NAIH or another competent supervisory authority and seek a judicial remedy. The current website form does not perform profiling or automated decision-making with legal effects.

7. Scope and changes

This notice covers website operation and enquiries. It does not replace separate notices for event photos, videos, the onsite Emergency Lab leaderboard or institutional learner data. Effective date: 24 September 2026.