Privacy Policy

Last updated: 13 July 2026

1. Data controller

Raw Materials Trade Kft.
Registered office: Mária utca 9, 5200 Törökszentmiklós, Hungary
Operational and ISO-certified site: H-2364 Ócsa, HRSZ 4515/2, Hungary
Company registration number: 16-09-020248 · EU VAT ID: HU29224933
Email: office@rawmaterialstrade.com

2. Purposes and legal bases

• B2B enquiries, quotation and documentation requests: Article 6(1)(b) GDPR where processing is necessary to take steps at the request of the data subject before entering into a contract; and Article 6(1)(f) GDPR for professional correspondence with business contacts and relationship management.
• Contract, accounting and statutory records: Article 6(1)(b) and (c) GDPR.
• Spam prevention, abuse control and IT security: Article 6(1)(f) GDPR.
• Optional website analytics: Article 6(1)(a) GDPR, based solely on consent. Consent may be refused or withdrawn at any time without affecting the use of the website.

The form acknowledgement confirms that you have read this notice. It is not consent to marketing or analytics.

3. Required and optional data

Fields marked with an asterisk are necessary to identify and answer the enquiry. Without them, the form cannot be submitted and we may be unable to provide a quotation or documentation. Optional fields help us prepare a more accurate response.

4. Data categories

Name, company, country, business email, optional telephone and company/tax identifier, product, quantity, industry, requested documents, message, source page, language and submission time. Cloudflare may temporarily process the IP address, browser, device and network signals and a Turnstile token for security verification. The form endpoint also uses a short-lived IP-based rate-limit key and a one-way hash of the business email address to limit repeated submissions; the raw email address is not stored in the rate-limit key.

If analytics is accepted, Google Analytics may process the page path without query parameters, page title, referrer without query parameters, approximate location, language, browser and device information, randomly generated cookie identifiers, page views, scrolls, outbound clicks, file downloads and the successful submission event of the enquiry form. Form field contents, names, email addresses, telephone numbers and message text are not sent to Google Analytics. For users in the EEA, Switzerland and the United Kingdom, Google states that individual IP addresses are not logged or stored by Google Analytics; IP data is used to derive coarse location and then discarded.

5. Recipients and processors

Access is limited to authorised Raw Materials Trade staff. The static website is hosted through GitHub Pages. Cloudflare provides Turnstile and the protected form endpoint. Google Apps Script and Google Workspace transmit and store accepted enquiries in the company mailbox. If analytics is accepted, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, provides Google Analytics as a data processor under its applicable data-processing terms. We do not sell personal data.

6. International transfers

GitHub, Cloudflare and Google may process data using infrastructure outside the EEA. Where required, transfers rely on an adequacy decision, the EU–US Data Privacy Framework for participating entities, or the European Commission’s Standard Contractual Clauses together with supplementary safeguards.

7. Retention

• Unsuccessful or closed enquiries: up to 12 months from closure.
• Quotation and negotiation correspondence: up to 24 months from closure, unless a contract, dispute or legal claim requires longer retention.
• Contractual, accounting and tax records: for the period required by applicable law.
• Worker rate-limit keys derived from the IP address and a one-way email hash: up to 10 minutes in the configured Cloudflare KV store.
• The analytics consent choice remains in local storage until it is changed or the browser storage is cleared. Google Analytics cookies are configured for a maximum of approximately 13 months. User-level and event-level Analytics data is retained according to the property setting, for no more than 14 months in a standard GA4 property.
• Provider security and diagnostic logs: only for the period configured in the relevant Cloudflare, GitHub and Google services and as necessary for fraud prevention, troubleshooting and security.

8. Security and anti-abuse controls

The form uses validation, a honeypot, completion-time checks, field and payload limits, rate limiting and mandatory server-side Cloudflare Turnstile verification. No security measure can guarantee absolute security, but access and processing are limited to what is necessary.

9. Cookies, local storage and Google Analytics

Essential local storage may remember the selected language and the analytics preference. Google Analytics 4, measurement ID G-13022PNK14, is disabled by default and its script is loaded only after the visitor actively selects “Allow analytics”. If accepted, first-party cookies such as _ga and _ga_* may be set for audience and session measurement. Advertising storage, advertising user data and advertising personalisation remain denied; Google signals and advertising personalisation are disabled in the website configuration. Query parameters are not transmitted as the Analytics page location.

You may change or withdraw your choice at any time. Withdrawal stops future analytics collection and removes the Analytics cookies that the website can access.

Open cookie settings

Further information: Google Privacy Policy and Google Analytics data safeguards.

10. Your rights

You may request access, rectification, erasure, restriction, portability where applicable, and object to processing based on legitimate interests. You may withdraw analytics consent at any time. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): www.naih.hu. Contact: office@rawmaterialstrade.com.

11. Automated decision-making

Raw Materials Trade does not use submitted enquiry data for automated decision-making or profiling that produces legal or similarly significant effects. Analytics is used only for aggregated website usage and performance measurement.

12. External services and product information

External websites, including Blogger and LinkedIn, apply their own privacy rules. Product information is for initial B2B orientation; suitability, classification, handling, availability and compliance must be confirmed against current supplier documentation for the selected grade and use.