Privacy Policy

Last Updated: 2026-10-17

Webtech Solutions (Zoltán Németh EV) ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard personal data when you use the TraceLogic Gateway and our website.

1. Our Roles in Data Processing

Under the General Data Protection Regulation (GDPR), we act in two different capacities:

• Data Controller: When we collect your data for billing, account management, and marketing (e.g., your admin email, payment details).
• Data Processor: When you use our API and Supplier Portal to process data about your suppliers, products, or customers. In this case, you are the Controller, and we process the data strictly according to your instructions.

2. What Data We Collect & Why (As Data Controller)

• Account Data: Name, email address, company name, billing details. Purpose: To provide the Service, manage your subscription, and send system notifications. Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR).
• Usage Data & Logs: IP addresses, browser types, API request volumes. Purpose: To maintain system security, debug errors, and prevent abuse. Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR).
• Cookies: We use Google tags and strictly necessary session cookies. Purpose: Analytics and authentication. Legal Basis: Consent (Art. 6(1)(a) GDPR) for non-essential cookies via our consent banner.

3. Data Processed on Your Behalf (As Data Processor)

When utilizing the TraceLogic Gateway, you may submit data into our system:

• Supplier Data: Emails used for secure portal links, geographic locations (plots/polygons), and supplier names.
• Audit Vault Data: Hashes and logs of compliance checks.
• Catalog Audit E-mail: After a free catalog audit we send one e-mail with the result summary and a link to the report to the address you entered. We keep the audit summary (counts, example findings, your e-mail and company name) to deliver the report and to follow up on your request. Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR).
• Catalog Audit (CSV Uploads): If you use our free /catalog-audit tool, we do not store or retain the uploaded files. The data is held in memory temporarily to generate the scan summary and is immediately discarded.

4. Third-Party Sub-processors

We use trusted third parties to run our Service. Data is only shared to the extent necessary:

• Cloud Hosting: Hetzner Online GmbH (server location: EU)
• AI OCR Service (Opt-in only): If you manually enable the AI document reading feature, uploaded supplier certificates are processed by OpenAI. Unless this feature is toggled on, no supplier documents leave our infrastructure.
• Analytics: Google (governed by your cookie consent preferences).

5. Data Security & Retention

• Security: We employ strict tenant isolation. Your API keys are shown only once. The audit vault uses tamper-evident SHA-256 hash chains.
• Retention: As a Data Controller, we retain your account data for as long as your account is active, and for statutory periods required by Hungarian tax and accounting laws (typically 8 years) after termination. Data processed as a Processor is retained as per your configurations or deleted upon contract termination.

6. Your GDPR Rights

If you are an individual residing in the EEA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion ("right to be forgotten").
• Object to or restrict our processing.
• Data portability.

To exercise these rights regarding data we hold as a Controller, contact us at support@tracelogicgateway.com. If your request relates to data we hold as a Processor on behalf of one of our Clients, please contact that Client directly.

7. Contact Information

Data Controller: Webtech Solutions (Zoltán Németh EV) Address: Veres Péter út 51, Budapest, Hungary Email: support@tracelogicgateway.com Tax Number: 90946080-1-42