Privacy Policy

Last updated: 29 October 2026

1. Who We Are

This website is operated under the CASTINEX brand by:

Duna Commerce & Fabrication Kft.
Registered address: 1134 Budapest, Váci út 47B, Hungary
Company registration number: 01-09-374303
EU VAT number: HU28795805
Email: info@castinex.eu
Telephone: +36 70 638 0578
Website: https://castinex.eu/

In this Privacy Policy, “CASTINEX”, “we”, “us” and “our” refer to Duna Commerce & Fabrication Kft.

Duna Commerce & Fabrication Kft. acts as the data controller for personal data processed in connection with this website and our business communications, except where another party independently determines the purposes and means of processing.

2. Scope of This Policy

This Privacy Policy explains how we process personal data when you:

  • Visit our website.

  • Contact us by email or through a website form.

  • Request information, a quotation or a discussion about our products and services.

  • Communicate with us in connection with a business relationship.

  • Interact with our business communications, where applicable.

This Policy should be read together with any cookie notice or other privacy information presented when you use a specific website feature.

3. Personal Data We May Process

Depending on your interaction with us, we may process the following categories of personal data:

Contact details: name, business email address, telephone number and other contact details you provide.

Professional and company information: company name, country, job title, professional role and other business information you choose to provide.

Inquiry and quotation information: product category, technical specifications, estimated quantities, project requirements, delivery information and other details submitted through our forms or correspondence.

Communication records: the content of messages, quotation requests, responses and related business correspondence.

Technical and usage information: where collected by our website infrastructure or enabled tools, this may include IP address, browser and device information, security logs, cookie identifiers and website usage data.

Please do not submit sensitive personal data through our website unless it is specifically requested and there is an appropriate legal basis for processing it.

4. How and Why We Use Personal Data

We process personal data for the following purposes, where applicable:

Responding to inquiries and quotation requests. We use the information you submit to respond to your request, clarify technical or commercial requirements and prepare or discuss quotations.

Taking steps before entering into a contract and performing contracts. Where relevant, we process contact and business information to prepare for, enter into and perform a contract or to take steps requested by you before entering into a contract.

Managing business relationships. We may use relevant contact and correspondence information to manage ongoing business communications, supplier relationships, customer relationships and related commercial matters.

Relevant business-to-business communications. Where permitted by applicable law, we may use relevant professional contact details to communicate with businesses about our products or services. We consider the context of the contact, the relevance of the communication and the rights of the individual concerned.

Operating and securing the website. We may process necessary technical information to maintain website functionality, prevent spam, protect against unauthorised activity, troubleshoot errors and ensure security.

Meeting legal obligations and protecting legal rights. We may process or retain relevant information to comply with legal obligations, maintain required records, resolve disputes or establish, exercise or defend legal claims.

We do not use personal data for purposes incompatible with the purposes described above without providing any additional information and obtaining consent where required by law.

5. Legal Bases for Processing

We rely on the applicable legal basis for each processing activity under Article 6 of the GDPR. Depending on the circumstances, this may include:

  • Pre-contractual steps and contractual necessity: where processing is necessary to respond to a request for a quotation, take steps at your request before entering into a contract or perform a contract.

  • Legitimate interests: where processing is necessary for our legitimate interests, such as managing relevant B2B relationships, maintaining business correspondence, protecting our website or pursuing or defending legal claims, provided those interests are not overridden by your rights and freedoms.

  • Legal obligations: where processing is necessary to comply with applicable legal requirements.

  • Consent: where you have given consent for a specific purpose and consent is the appropriate legal basis, for example where required for certain non-essential cookies or other consent-based processing.

Where we rely on legitimate interests, the interests pursued depend on the specific processing activity. You may request further information about those interests by contacting us.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Where personal data is required to respond to a request or enter into a contract, we will explain if providing particular information is necessary. If the required information is not provided, we may be unable to respond fully or provide the requested service.

6. Business Communications and Direct Marketing

CASTINEX provides business-to-business products and sourcing services. We may communicate with business contacts about relevant inquiries, products and services where permitted by applicable law.

Where we use professional contact details obtained from publicly available or other third-party sources, we will do so only where there is an applicable legal basis and the processing complies with relevant data protection and electronic communications rules. Where required, we will provide the information required by applicable law about the source and use of the data.

You may object at any time to the processing of your personal data for direct marketing. After a valid objection, we will stop processing your personal data for that purpose.

To exercise this right, contact info@castinex.eu.

We do not sell personal data.

7. Who May Receive Personal Data

We may disclose or make personal data available to third parties where necessary for the purposes described in this Policy. Depending on the services actually used, these recipients may include:

  • Website hosting and infrastructure providers.

  • Business email, SMTP and email-delivery providers.

  • Website form, spam-prevention and security service providers.

  • Website maintenance and technical support providers.

  • Analytics or cookie-management providers, if enabled.

  • Professional advisers, auditors or insurers where necessary.

  • Public authorities, courts or other recipients where disclosure is required by law or necessary to protect our legal rights.

Where a service provider processes personal data on our behalf, we take appropriate steps to ensure that the processing is governed by the applicable data protection requirements.

A third party that independently determines the purposes and means of processing may act as a separate data controller for its own processing activities.

8. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA). Where personal data is transferred to a country outside the EEA and the GDPR requires safeguards, we will rely on an applicable transfer mechanism, such as an adequacy decision or appropriate safeguards under the GDPR.

You may contact us at info@castinex.eu to request further information about applicable safeguards relevant to your personal data.

9. How Long We Retain Personal Data

We retain personal data only for as long as necessary for the relevant purpose, taking into account the nature of the information, the context of the processing, applicable legal obligations and the need to establish, exercise or defend legal claims.

In particular:

  • General inquiries and quotation requests: retained for the period reasonably necessary to respond, manage the inquiry and follow up on the potential business relationship.

  • Customer, supplier and contractual records: retained for the duration of the relevant relationship and thereafter for any period required by applicable law or reasonably necessary to resolve disputes or protect legal rights.

  • Accounting and tax records: retained for the periods required by applicable Hungarian law.

  • Website security and technical logs: retained according to the applicable system configuration and the period reasonably necessary for security, troubleshooting and incident investigation.

  • Consent and cookie records: retained for the period necessary to document and manage consent, where applicable, in accordance with the relevant configuration and legal requirements.

When personal data is no longer necessary, we will delete it or anonymise it, unless further retention is required or permitted by law.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Strictly necessary technologies may be used where required for core website functionality, security or a service explicitly requested by the visitor. Non-essential cookies and similar technologies, including certain analytics or marketing technologies, will be used only in accordance with applicable consent requirements.

The specific cookies and technologies used depend on the website configuration and the services enabled at the time of your visit.

Where applicable, you can manage your cookie preferences through the cookie settings presented on the website. You can also manage cookies through your browser settings, although blocking certain cookies may affect website functionality.

If a separate Cookie Policy is provided, it should describe the cookies actually used, their purposes, relevant providers and retention periods. Cookie preferences should be changeable where required by applicable law.

11. Data Security

We implement reasonable technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.

Access to personal data is limited to those who need it for legitimate business or service-related purposes. Where required, we take appropriate steps to ensure that service providers protect personal data.

No website, electronic transmission or storage system can be guaranteed to be completely secure.

12. Your Rights Under the GDPR

Subject to the conditions and limitations set out in applicable law, you may have the right to:

  • Access: obtain confirmation as to whether we process your personal data and request access to it.

  • Rectification: request correction of inaccurate or incomplete personal data.

  • Erasure: request deletion of personal data where the legal conditions are met.

  • Restriction: request restriction of processing in certain circumstances.

  • Objection: object to processing based on legitimate interests, on grounds relating to your particular situation.

  • Direct marketing objection: object at any time to processing of personal data for direct marketing.

  • Data portability: receive certain personal data in a structured, commonly used and machine-readable format and transmit it to another controller, where the legal conditions are met.

  • Withdraw consent: withdraw consent where processing is based on consent.

  • Complain to a supervisory authority: lodge a complaint with a competent data protection authority.

To exercise your rights, contact info@castinex.eu. We may need to verify your identity before responding. We will respond within the time limits prescribed by applicable law.

These rights are not absolute and may be subject to legal conditions or exceptions.

13. Supervisory Authority and Complaints

If you believe that our processing of your personal data infringes applicable data protection law, you may lodge a complaint with a competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the place of the alleged infringement, where applicable.

In Hungary, the relevant supervisory authority is:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Website: https://naih.hu/

You may also contact us first at info@castinex.eu, although this does not limit your right to lodge a complaint with a supervisory authority.

14. Third-Party Websites

Our website may contain links to third-party websites or services. Those websites are operated independently and have their own privacy practices. We are not responsible for the privacy practices of websites that we do not operate. Please review their privacy notices before providing personal data to them.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our website, business operations, service providers or applicable legal requirements.

The current version will be published on this page with its latest update date. Where required by law, we will provide additional information about material changes.

16. Contact Us

For questions about this Privacy Policy or the processing of your personal data, please contact:

Duna Commerce & Fabrication Kft. — CASTINEX
1134 Budapest, Váci út 47B, Hungary
Email: info@castinex.eu
Telephone: +36 70 638 0578
Website: https://castinex.eu/

Scroll to Top